Attachment 12270 Details for Bug 12021 – log.smbd :You can see the posix_unlink and deletion starts at time-stamp 2016/07/13 05:21:03.532018 in the attached

log.smbd :You can see the posix_unlink and deletion starts at time-stamp 2016/07/13 05:21:03.532018 in the attached

log.smbd.txt (text/plain), 4.58 MB, created by Mark Barbieri on 2016-07-14 09:58:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mark Barbieri

Created: 2016-07-14 09:58:06 UTC

Size: 4.58 MB

patch

obsolete

>[2016/07/13 05:20:55.092328,  3, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3730(lp_load_ex)
>  lp_load_ex: refreshing parameters
>[2016/07/13 05:20:55.092352,  5, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts)
>  Freeing parametrics:
>[2016/07/13 05:20:55.092403,  3, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:544(init_globals)
>  Initialising global parameters
>[2016/07/13 05:20:55.092478,  3, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2659(lp_do_section)
>  Processing section "[global]"
>  doing parameter server max protocol = SMB3
>  doing parameter interfaces = 127.0.0.1 192.168.1.101
>  doing parameter bind interfaces only = yes
>  doing parameter encrypt passwords = yes
>  doing parameter dns proxy = no
>  doing parameter strict locking = no
>  doing parameter oplocks = yes
>  doing parameter deadtime = 15
>  doing parameter max log size = 51200
>  doing parameter max open files = 235055
>  doing parameter logging = file
>  doing parameter load printers = no
>  doing parameter printing = bsd
>  doing parameter printcap name = /dev/null
>  doing parameter disable spoolss = yes
>  doing parameter getwd cache = yes
>  doing parameter guest account = nobody
>  doing parameter map to guest = Bad User
>  doing parameter obey pam restrictions = yes
>  doing parameter directory name cache size = 0
>  doing parameter kernel change notify = no
>  doing parameter panic action = /usr/local/libexec/samba/samba-backtrace
>  doing parameter nsupdate command = /usr/local/bin/samba-nsupdate -g
>  doing parameter server string = FreeNAS Server
>  doing parameter ea support = yes
>  doing parameter store dos attributes = yes
>  doing parameter lm announce = yes
>  doing parameter hostname lookups = yes
>  doing parameter time server = yes
>  doing parameter acl allow execute always = true
>  doing parameter dos filemode = yes
>  doing parameter multicast dns register = yes
>  doing parameter domain logons = no
>  doing parameter local master = no
>  doing parameter idmap config *: backend = tdb
>  doing parameter idmap config *: range = 90000001-100000000
>  doing parameter server role = standalone
>  doing parameter netbios name = FREENAS-TEST
>  doing parameter workgroup = ONE
>  doing parameter security = user
>  doing parameter pid directory = /var/run/samba
>  doing parameter create mask = 0666
>  doing parameter directory mask = 0777
>  doing parameter client ntlmv2 auth = yes
>  doing parameter dos charset = CP437
>  doing parameter unix charset = UTF-8
>  doing parameter log level = 10
>[2016/07/13 05:20:55.093142,  5, pid=18098, effective(0, 0), real(0, 0)] ../lib/util/debug.c:638(debug_dump_status)
>  INFO: Current debug levels:
>    all: 10
>    tdb: 10
>    printdrivers: 10
>    lanman: 10
>    smb: 10
>    rpc_parse: 10
>    rpc_srv: 10
>    rpc_cli: 10
>    passdb: 10
>    sam: 10
>    auth: 10
>    winbind: 10
>    vfs: 10
>    idmap: 10
>    quota: 10
>    acls: 10
>    locking: 10
>    msdfs: 10
>    dmapi: 10
>    registry: 10
>    scavenger: 10
>    dns: 10
>    ldb: 10
>    tevent: 10
>[2016/07/13 05:20:55.093264,  2, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2676(lp_do_section)
>  Processing section "[Test]"
>[2016/07/13 05:20:55.093287,  8, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1419(add_a_service)
>  add_a_service: Creating snum = 0 for Test
>[2016/07/13 05:20:55.093300, 10, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1460(hash_a_service)
>  hash_a_service: creating servicehash
>[2016/07/13 05:20:55.093313, 10, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1469(hash_a_service)
>  hash_a_service: hashing index 0 for service name Test
>  doing parameter path = /mnt/tank/Test
>  doing parameter printable = no
>  doing parameter veto files = /.snapshot/.windows/.mac/.zfs/
>  doing parameter writeable = yes
>  doing parameter browseable = yes
>  doing parameter vfs objects = zfs_space zfsacl aio_pthread streams_xattr
>  doing parameter hide dot files = yes
>  doing parameter guest ok = no
>  doing parameter nfs4:mode = special
>  doing parameter nfs4:acedup = merge
>  doing parameter nfs4:chown = true
>  doing parameter zfsacl:acesort = dontcare
>[2016/07/13 05:20:55.093559,  4, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3771(lp_load_ex)
>  pm_process() returned Yes
>[2016/07/13 05:20:55.093574,  7, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4087(lp_servicenumber)
>  lp_servicenumber: couldn't find homes
>[2016/07/13 05:20:55.093594,  8, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1419(add_a_service)
>  add_a_service: Creating snum = 1 for IPC$
>[2016/07/13 05:20:55.093609, 10, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1469(hash_a_service)
>  hash_a_service: hashing index 1 for service name IPC$
>[2016/07/13 05:20:55.093624,  3, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1576(lp_add_ipc)
>  adding IPC service
>[2016/07/13 05:20:55.093656,  6, pid=18098, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2214(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/etc/smb4.conf -> /usr/local/etc/smb4.conf  last mod_time: Wed Jul 13 05:20:54 2016
>  
>[2016/07/13 05:20:55.093744,  2, pid=18098, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:341(add_interface)
>  added interface lo0 ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0
>[2016/07/13 05:20:55.093770,  2, pid=18098, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:341(add_interface)
>  added interface em0 ip=192.168.1.101 bcast=192.168.1.255 netmask=255.255.255.0
>[2016/07/13 05:20:55.093793,  3, pid=18098, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1331(main)
>  loaded services
>[2016/07/13 05:20:55.093809,  5, pid=18098, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names)
>  Netbios name list:-
>  my_netbios_names[0]="FREENAS-TEST"
>[2016/07/13 05:20:55.093863,  1, pid=18098, effective(0, 0), real(0, 0)] ../source3/profile/profile_dummy.c:30(set_profile_level)
>  INFO: Profiling support unavailable in this build.
>[2016/07/13 05:20:55.093880,  3, pid=18098, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1362(main)
>  Becoming a daemon.
>[2016/07/13 05:20:55.094591,  8, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util.c:394(fcntl_lock)
>  fcntl_lock 14 12 0 1 3
>[2016/07/13 05:20:55.094648,  8, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util.c:429(fcntl_lock)
>  fcntl_lock: Lock call successful
>[2016/07/13 05:20:55.094886,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:154(make_pdb_method_name)
>  Attempting to find a passdb backend to match tdbsam (tdbsam)
>[2016/07/13 05:20:55.094907,  2, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:160(make_pdb_method_name)
>  No builtin backend found, trying to load plugin
>[2016/07/13 05:20:55.094920,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/modules.c:171(do_smb_load_module)
>  Probing module 'tdbsam'
>[2016/07/13 05:20:55.094934,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/modules.c:185(do_smb_load_module)
>  Probing module 'tdbsam': Trying to load from /usr/local/lib/shared-modules/pdb/tdbsam.so
>[2016/07/13 05:20:55.095184,  2, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/modules.c:196(do_smb_load_module)
>  Module 'tdbsam' loaded
>[2016/07/13 05:20:55.095214,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb)
>  Attempting to register passdb backend tdbsam
>[2016/07/13 05:20:55.095227,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb)
>  Successfully added passdb backend 'tdbsam'
>[2016/07/13 05:20:55.095243,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:175(make_pdb_method_name)
>  Found pdb backend tdbsam
>[2016/07/13 05:20:55.095282,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:186(make_pdb_method_name)
>  pdb backend tdbsam has a valid init
>[2016/07/13 05:20:55.095461,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 1 for /var/lock/smbXsrv_version_global.tdb
>[2016/07/13 05:20:55.095498, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:/var/lock/smbXsrv_version_global.tdb 2:<none> 3:<none>
>[2016/07/13 05:20:55.095515, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key 736D62587372765F7665
>[2016/07/13 05:20:55.095535, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x812043720
>[2016/07/13 05:20:55.095594, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key 736D62587372765F7665
>[2016/07/13 05:20:55.095610,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 1 for /var/lock/smbXsrv_version_global.tdb
>[2016/07/13 05:20:55.095625, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:20:55.095638, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:250(smbXsrv_version_global_init)
>  smbXsrv_version_global_init
>[2016/07/13 05:20:55.095650, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:251(smbXsrv_version_global_init)
>[2016/07/13 05:20:55.095660,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &global_blob: struct smbXsrv_version_globalB
>          version                  : SMBXSRV_VERSION_0 (0)
>          seqnum                   : 0x00000001 (1)
>          info                     : union smbXsrv_version_globalU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_version_global0
>                  db_rec                   : NULL
>                  num_nodes                : 0x00000001 (1)
>                  nodes: ARRAY(1)
>                      nodes: struct smbXsrv_version_node0
>                          server_id: struct server_id
>                              pid                      : 0x00000000000046b3 (18099)
>                              task_id                  : 0x00000000 (0)
>                              vnn                      : 0xffffffff (4294967295)
>                              unique_id                : 0x7e18743c7d428e2a (9086140051368349226)
>                          min_version              : SMBXSRV_VERSION_0 (0)
>                          max_version              : SMBXSRV_VERSION_0 (0)
>                          current_version          : SMBXSRV_VERSION_0 (0)
>[2016/07/13 05:20:55.096339,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 789 - private_data=0x8120821c0
>[2016/07/13 05:20:55.096454, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:768(regdb_init)
>  regdb_init: registry db openend. refcount reset (1)
>[2016/07/13 05:20:55.096483, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init)
>  reghook_cache_init: new tree with default ops 0x801c911b0 for key []
>[2016/07/13 05:20:55.096568, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
>[2016/07/13 05:20:55.096599, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Samba Printer Port] len[2]
>[2016/07/13 05:20:55.096615, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
>[2016/07/13 05:20:55.096640, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70]
>[2016/07/13 05:20:55.096656, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
>[2016/07/13 05:20:55.096682, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[DisplayName] len[20]
>[2016/07/13 05:20:55.096697, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
>[2016/07/13 05:20:55.096712, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
>[2016/07/13 05:20:55.096733, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[DisplayName] len[20]
>[2016/07/13 05:20:55.096746, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
>[2016/07/13 05:20:55.096763, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801450e50 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers]
>[2016/07/13 05:20:55.096778,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.096801, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree
>[2016/07/13 05:20:55.096815,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.096828, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801c911b0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
>[2016/07/13 05:20:55.096843,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.096857, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree
>[2016/07/13 05:20:55.096869,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.096883, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801c911b0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
>[2016/07/13 05:20:55.096895,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.096913, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree
>[2016/07/13 05:20:55.096926,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.096937, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801450f00 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares]
>[2016/07/13 05:20:55.096952,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.096966, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree
>[2016/07/13 05:20:55.096977,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.096992, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x8032a7500 for key [\HKLM\SOFTWARE\Samba\smbconf]
>[2016/07/13 05:20:55.097004,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.097018, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree
>[2016/07/13 05:20:55.097032,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.097044, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801450f58 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
>[2016/07/13 05:20:55.097058,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.097072, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree
>[2016/07/13 05:20:55.097084,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.097097, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801450fb0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions]
>[2016/07/13 05:20:55.097109,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.097125, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree
>[2016/07/13 05:20:55.097139,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.097151, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801451008 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
>[2016/07/13 05:20:55.097165,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.097179, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree
>[2016/07/13 05:20:55.097191,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.097205, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801451060 for key [\HKPT]
>[2016/07/13 05:20:55.097217,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.097229, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKPT] to tree
>[2016/07/13 05:20:55.097244,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.097256, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x8014510b8 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
>[2016/07/13 05:20:55.097268,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.097284, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree
>[2016/07/13 05:20:55.097296,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.097308, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x801451110 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
>[2016/07/13 05:20:55.097322,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add)
>  pathtree_add: Enter
>[2016/07/13 05:20:55.097336, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add)
>  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree
>[2016/07/13 05:20:55.097349,  8, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add)
>  pathtree_add: Exit
>[2016/07/13 05:20:55.097361, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (1->0)
>[2016/07/13 05:20:55.097531,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user nobody
>[2016/07/13 05:20:55.097549,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is nobody
>[2016/07/13 05:20:55.098001,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [nobody]!
>[2016/07/13 05:20:55.098036,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user FREENAS-TEST\nobody
>[2016/07/13 05:20:55.098051,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is freenas-test\nobody
>[2016/07/13 05:20:55.098081,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as given is FREENAS-TEST\nobody
>[2016/07/13 05:20:55.098104,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as uppercase is FREENAS-TEST\NOBODY
>[2016/07/13 05:20:55.098131,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals)
>  Checking combinations of 0 uppercase letters in freenas-test\nobody
>[2016/07/13 05:20:55.098145,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals didn't find user [FREENAS-TEST\nobody]!
>[2016/07/13 05:20:55.098157,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user nobody
>[2016/07/13 05:20:55.098172,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is nobody
>[2016/07/13 05:20:55.098185,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [nobody]!
>[2016/07/13 05:20:55.098204, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3)
>  Create local NT token for nobody
>[2016/07/13 05:20:55.098223,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user nobody
>[2016/07/13 05:20:55.098235,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is nobody
>[2016/07/13 05:20:55.098248,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [nobody]!
>[2016/07/13 05:20:55.098265, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist)
>  sys_getgrouplist: user [nobody]
>[2016/07/13 05:20:55.098374,  5, pid=18099, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:73(gencache_init)
>  Opening cache file at /var/db/samba4/gencache.tdb
>[2016/07/13 05:20:55.098455,  5, pid=18099, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:124(gencache_init)
>  Opening cache file at /var/lock/gencache_notrans.tdb
>[2016/07/13 05:20:55.098517, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid)
>  gid 65534 -> sid S-1-22-2-65534
>[2016/07/13 05:20:55.098598,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.098616,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.098633,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.098649,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.098661,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.098692,  3, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:547(finalize_local_nt_token)
>  Failed to fetch domain sid for ONE
>[2016/07/13 05:20:55.098709,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.098726,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.098739,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.098754,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.098766,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.098777,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.098802,  3, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:579(finalize_local_nt_token)
>  Failed to fetch domain sid for ONE
>[2016/07/13 05:20:55.098818,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.098831,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.098846,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.098858,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.098870,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.098884,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.098937,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.098988,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1113437308-4027323533-1829826370-501]
>[2016/07/13 05:20:55.099011,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1113437308-4027323533-1829826370-514]
>[2016/07/13 05:20:55.099027,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-2-65534]
>[2016/07/13 05:20:55.099045,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set: 0x0
>[2016/07/13 05:20:55.099065,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2016/07/13 05:20:55.099083,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-32-546]
>[2016/07/13 05:20:55.099107, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-21-1113437308-4027323533-1829826370-501]: value=[65534:U]
>[2016/07/13 05:20:55.099120, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-21-1113437308-4027323533-1829826370-501]: id=[65534], endptr=[:U]
>[2016/07/13 05:20:55.099160, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[90000001:G]
>[2016/07/13 05:20:55.099173, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[90000001], endptr=[:G]
>[2016/07/13 05:20:55.099206, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[90000002:G]
>[2016/07/13 05:20:55.099218, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[90000002], endptr=[:G]
>[2016/07/13 05:20:55.099258, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1360(sids_to_unixids)
>  wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE
>[2016/07/13 05:20:55.099280,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099295,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.099309,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099324,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.099336,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.099360,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 514.
>[2016/07/13 05:20:55.099378,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:20:55.099391,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099403,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:20:55.099418,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.099429,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.099497,  4, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:558(tdbsam_open)
>  tdbsam_open: successfully opened /var/db/samba4/private/passdb.tdb
>[2016/07/13 05:20:55.099518,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202.
>[2016/07/13 05:20:55.099541,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099557,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2016/07/13 05:20:55.099569,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id)
>  SID S-1-5-21-1113437308-4027323533-1829826370-514 belongs to our domain, but there is no corresponding object in the database.
>[2016/07/13 05:20:55.099587,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.099606, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid)
>  LEGACY: mapping failed for sid S-1-5-21-1113437308-4027323533-1829826370-514
>[2016/07/13 05:20:55.099620,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099635,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.099647,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099659,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.099671,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.099694,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 514.
>[2016/07/13 05:20:55.099707,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:20:55.099722,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099734,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:20:55.099746,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.099759,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.099782,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202.
>[2016/07/13 05:20:55.099802,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099818,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2016/07/13 05:20:55.099830,  5, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id)
>  SID S-1-5-21-1113437308-4027323533-1829826370-514 belongs to our domain, but there is no corresponding object in the database.
>[2016/07/13 05:20:55.099849,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.099862, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid)
>  LEGACY: mapping failed for sid S-1-5-21-1113437308-4027323533-1829826370-514
>[2016/07/13 05:20:55.099875,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099891,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.099902,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.099914,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.099928,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.099952, 10, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id)
>  Could not find map for sid S-1-5-32-546
>[2016/07/13 05:20:55.099969,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.099984, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid)
>  LEGACY: mapping failed for sid S-1-5-32-546
>[2016/07/13 05:20:55.099997,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.100010,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.100024,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.100036,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.100048,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.100073, 10, pid=18099, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id)
>  Could not find map for sid S-1-5-32-546
>[2016/07/13 05:20:55.100091,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.100103, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid)
>  LEGACY: mapping failed for sid S-1-5-32-546
>[2016/07/13 05:20:55.100120, 10, pid=18099, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:594(create_local_token)
>  Could not convert SID S-1-5-21-1113437308-4027323533-1829826370-514 to gid, ignoring it
>[2016/07/13 05:20:55.100135, 10, pid=18099, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:594(create_local_token)
>  Could not convert SID S-1-5-32-546 to gid, ignoring it
>[2016/07/13 05:20:55.100159, 10, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
>  Security token SIDs (9):
>    SID[  0]: S-1-5-21-1113437308-4027323533-1829826370-501
>    SID[  1]: S-1-5-21-1113437308-4027323533-1829826370-514
>    SID[  2]: S-1-22-2-65534
>    SID[  3]: S-1-1-0
>    SID[  4]: S-1-5-2
>    SID[  5]: S-1-5-32-546
>    SID[  6]: S-1-22-1-65534
>    SID[  7]: S-1-22-2-90000001
>    SID[  8]: S-1-22-2-90000002
>   Privileges (0x               0):
>   Rights (0x               0):
>[2016/07/13 05:20:55.100235, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 3 supplementary groups
>  Group[  0]: 65534
>  Group[  1]: 90000001
>  Group[  2]: 90000002
>[2016/07/13 05:20:55.100272,  1, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/files.c:218(file_init_global)
>  file_init_global: Information only: requested 235055 open files, 59392 are available.
>[2016/07/13 05:20:55.100376,  3, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg)
>  Initialise the svcctl registry keys if needed.
>[2016/07/13 05:20:55.100400,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.100414,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.100429,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.100441,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.100453,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.100508,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.100523, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open)
>  regdb_open: registry db opened. refcount reset (1)
>[2016/07/13 05:20:55.100613,  4, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p)
>  Create pipe requested winreg
>[2016/07/13 05:20:55.100637, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:222(init_pipe_handles)
>  init_pipe_handle_list: created handle list for pipe winreg
>[2016/07/13 05:20:55.100650, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:239(init_pipe_handles)
>  init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg
>[2016/07/13 05:20:55.100700,  4, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p)
>  Created internal pipe winreg
>[2016/07/13 05:20:55.100732,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenHKLM: struct winreg_OpenHKLM
>          in: struct winreg_OpenHKLM
>              system_name              : NULL
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>[2016/07/13 05:20:55.100818,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2016/07/13 05:20:55.100835, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (1->2)
>[2016/07/13 05:20:55.100850, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM]
>[2016/07/13 05:20:55.100862, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM]
>[2016/07/13 05:20:55.100878, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.100890, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM]
>[2016/07/13 05:20:55.100919,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.100957,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenHKLM: struct winreg_OpenHKLM
>          out: struct winreg_OpenHKLM
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.101039,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenKey: struct winreg_OpenKey
>          in: struct winreg_OpenKey
>              parent_handle            : *
>                  parent_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              keyname: struct winreg_String
>                  name_len                 : 0x0044 (68)
>                  name_size                : 0x0044 (68)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services'
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>[2016/07/13 05:20:55.101204,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.101240,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.101258, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (2->3)
>[2016/07/13 05:20:55.101273, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.101289, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.101302, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.101314, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.101339,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.101353, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.101366, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.101381, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.101395, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.101407, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.101432,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.101445, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.101462, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.101478, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.101492, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.101507, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.101537, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.101553, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.101567,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.101602,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenKey: struct winreg_OpenKey
>          out: struct winreg_OpenKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.101663,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_QueryInfoKey: struct winreg_QueryInfoKey
>          in: struct winreg_QueryInfoKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              classname                : *
>                  classname: struct winreg_String
>                      name_len                 : 0x0000 (0)
>                      name_size                : 0x0000 (0)
>                      name                     : NULL
>[2016/07/13 05:20:55.101742,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.101780, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x801c911b0)
>[2016/07/13 05:20:55.101793, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.101810, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2093(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.101831,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_QueryInfoKey: struct winreg_QueryInfoKey
>          out: struct winreg_QueryInfoKey
>              classname                : *
>                  classname: struct winreg_String
>                      name_len                 : 0x0000 (0)
>                      name_size                : 0x0000 (0)
>                      name                     : NULL
>              num_subkeys              : *
>                  num_subkeys              : 0x00000007 (7)
>              max_subkeylen            : *
>                  max_subkeylen            : 0x0000001c (28)
>              max_classlen             : *
>                  max_classlen             : 0x00000000 (0)
>              num_values               : *
>                  num_values               : 0x00000000 (0)
>              max_valnamelen           : *
>                  max_valnamelen           : 0x00000002 (2)
>              max_valbufsize           : *
>                  max_valbufsize           : 0x00000000 (0)
>              secdescsize              : *
>                  secdescsize              : 0x00000078 (120)
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.101996,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          in: struct winreg_EnumKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              enum_index               : 0x00000000 (0)
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : ''
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>[2016/07/13 05:20:55.102134,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.102170,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
>  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.102183,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          out: struct winreg_EnumKey
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x001a (26)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : 'LanmanServer'
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.102303,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          in: struct winreg_EnumKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              enum_index               : 0x00000001 (1)
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : ''
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>[2016/07/13 05:20:55.102436,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.102472,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
>  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.102493,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          out: struct winreg_EnumKey
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0012 (18)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : 'Eventlog'
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.102620,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          in: struct winreg_EnumKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              enum_index               : 0x00000002 (2)
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : ''
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>[2016/07/13 05:20:55.102752,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.102788,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
>  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.102801,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          out: struct winreg_EnumKey
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x000c (12)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : 'Tcpip'
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.102920,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          in: struct winreg_EnumKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              enum_index               : 0x00000003 (3)
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : ''
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>[2016/07/13 05:20:55.103056,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.103092,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
>  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.103105,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          out: struct winreg_EnumKey
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0012 (18)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : 'Netlogon'
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.103285,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          in: struct winreg_EnumKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              enum_index               : 0x00000004 (4)
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : ''
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>[2016/07/13 05:20:55.103423,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.103455,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
>  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.103471,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          out: struct winreg_EnumKey
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0010 (16)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : 'Spooler'
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.103594,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          in: struct winreg_EnumKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              enum_index               : 0x00000005 (5)
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : ''
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>[2016/07/13 05:20:55.103730,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.103766,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
>  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.103779,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          out: struct winreg_EnumKey
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x001e (30)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : 'RemoteRegistry'
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.103896,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          in: struct winreg_EnumKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>              enum_index               : 0x00000006 (6)
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : ''
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>[2016/07/13 05:20:55.104036,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.104070,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey)
>  _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.104087,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_EnumKey: struct winreg_EnumKey
>          out: struct winreg_EnumKey
>              name                     : *
>                  name: struct winreg_StringBuf
>                      length                   : 0x000a (10)
>                      size                     : 0x001e (30)
>                      name                     : *
>                          name                     : 'WINS'
>              keyclass                 : *
>                  keyclass: struct winreg_StringBuf
>                      length                   : 0x0000 (0)
>                      size                     : 0x0002 (2)
>                      name                     : *
>                          name                     : ''
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.104215,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0054 (84)
>                  name_size                : 0x0054 (84)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\Spooler'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_ACTION_NONE (0)
>[2016/07/13 05:20:55.104423,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.104460, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler'
>[2016/07/13 05:20:55.104482,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.104497,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.104510,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.104527, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.104540, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.104552, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.104569, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.104581, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.104602,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.104619,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.104631, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.104648, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.104661, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.104674, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.104689, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.104711, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.104725,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.104743,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.104758, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.104777, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.104789, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.104803, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.104818, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.104848, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.104862,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Spooler]
>[2016/07/13 05:20:55.104878, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.104891, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2016/07/13 05:20:55.104907, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2016/07/13 05:20:55.104921, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.104933, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2016/07/13 05:20:55.104955, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.104969,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.105006,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.105083,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000c (12)
>                  name_size                : 0x000c (12)
>                  name                     : *
>                      name                     : 'Start'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x02 (2)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.105258,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.105334,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start]
>[2016/07/13 05:20:55.105348,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.105364, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x801c911b0)
>[2016/07/13 05:20:55.105377, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2016/07/13 05:20:55.105401, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Start] len[4]
>[2016/07/13 05:20:55.105415, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[1]: name[Type] len[4]
>[2016/07/13 05:20:55.105429, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
>[2016/07/13 05:20:55.105446, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[3]: name[ObjectName] len[24]
>[2016/07/13 05:20:55.105459, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[4]: name[DisplayName] len[28]
>[2016/07/13 05:20:55.105482, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[5]: name[ImagePath] len[84]
>[2016/07/13 05:20:55.105496, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[6]: name[Description] len[106]
>[2016/07/13 05:20:55.105515,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.105549,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000a (10)
>                  name_size                : 0x000a (10)
>                  name                     : *
>                      name                     : 'Type'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x10 (16)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.105675,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.105712,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type]
>[2016/07/13 05:20:55.105725,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.105743,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.105775,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x001a (26)
>                  name_size                : 0x001a (26)
>                  name                     : *
>                      name                     : 'ErrorControl'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.105902,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.105938,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl]
>[2016/07/13 05:20:55.105956,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.105970,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.106006,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0016 (22)
>                  name_size                : 0x0016 (22)
>                  name                     : *
>                      name                     : 'ObjectName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(24)
>                      [0]                      : 0x4c (76)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x6f (111)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x63 (99)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x61 (97)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x6c (108)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x53 (83)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x79 (121)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x73 (115)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x74 (116)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x65 (101)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x6d (109)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x00 (0)
>                      [23]                     : 0x00 (0)
>              size                     : 0x00000018 (24)
>[2016/07/13 05:20:55.106258,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.106295,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName]
>[2016/07/13 05:20:55.106309,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.106322,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.106362,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'DisplayName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(28)
>                      [0]                      : 0x50 (80)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x72 (114)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x69 (105)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x6e (110)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x74 (116)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x20 (32)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x53 (83)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x70 (112)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x6f (111)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x6f (111)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x6c (108)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x65 (101)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x72 (114)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x00 (0)
>                      [27]                     : 0x00 (0)
>              size                     : 0x0000001c (28)
>[2016/07/13 05:20:55.106648,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.106680,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName]
>[2016/07/13 05:20:55.106698,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.106711,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.106748,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0014 (20)
>                  name_size                : 0x0014 (20)
>                  name                     : *
>                      name                     : 'ImagePath'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(84)
>                      [0]                      : 0x2f (47)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x75 (117)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x73 (115)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x72 (114)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x2f (47)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6c (108)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x6f (111)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x63 (99)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x61 (97)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x6c (108)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x2f (47)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x6c (108)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x69 (105)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x62 (98)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x2f (47)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x73 (115)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x68 (104)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x61 (97)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x72 (114)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x65 (101)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x64 (100)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x2d (45)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x6d (109)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x6f (111)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x64 (100)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x75 (117)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x6c (108)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x65 (101)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x73 (115)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x2f (47)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x73 (115)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x76 (118)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x63 (99)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x63 (99)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x74 (116)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x6c (108)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x2f (47)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x73 (115)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x6d (109)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x62 (98)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x64 (100)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>              size                     : 0x00000054 (84)
>[2016/07/13 05:20:55.107435,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.107479,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath]
>[2016/07/13 05:20:55.107492,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.107511,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.107545,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'Description'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(106)
>                      [0]                      : 0x49 (73)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x6e (110)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x74 (116)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x65 (101)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x72 (114)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6e (110)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x61 (97)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x6c (108)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x20 (32)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x73 (115)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x65 (101)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x72 (114)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x76 (118)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x69 (105)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x63 (99)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x65 (101)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x20 (32)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x66 (102)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x6f (111)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x72 (114)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x20 (32)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x73 (115)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x70 (112)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x6f (111)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x6f (111)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x6c (108)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x69 (105)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x6e (110)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x67 (103)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x20 (32)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x66 (102)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x69 (105)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x6c (108)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x65 (101)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x73 (115)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x20 (32)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x74 (116)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x6f (111)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x20 (32)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x70 (112)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x72 (114)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x69 (105)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x6e (110)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x74 (116)
>                      [87]                     : 0x00 (0)
>                      [88]                     : 0x20 (32)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x64 (100)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x65 (101)
>                      [93]                     : 0x00 (0)
>                      [94]                     : 0x76 (118)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x69 (105)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x63 (99)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0x65 (101)
>                      [101]                    : 0x00 (0)
>                      [102]                    : 0x73 (115)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x00 (0)
>                      [105]                    : 0x00 (0)
>              size                     : 0x0000006a (106)
>[2016/07/13 05:20:55.108333,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.108389,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description]
>[2016/07/13 05:20:55.108416,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.108436,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.108470,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000003-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.108523,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.108576,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.108620,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.108639, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.108652,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.108716,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0066 (102)
>                  name_size                : 0x0066 (102)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\Spooler\Security'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>[2016/07/13 05:20:55.108925,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.108957, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security'
>[2016/07/13 05:20:55.108976,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.108989,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.109006,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.109019, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.109032, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.109049, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.109062, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.109074, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.109102,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.109115,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.109128, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.109149, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.109162, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.109180, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.109192, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.109213, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.109232,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.109245,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.109257, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.109275, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.109287, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.109306, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.109318, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.109347, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.109366,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.109378,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Spooler]
>[2016/07/13 05:20:55.109390, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.109409, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2016/07/13 05:20:55.109423, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2016/07/13 05:20:55.109443, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.109455, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2016/07/13 05:20:55.109473, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.109497,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2016/07/13 05:20:55.109511, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.109524, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2016/07/13 05:20:55.109542, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2016/07/13 05:20:55.109556, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.109573, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2016/07/13 05:20:55.109590, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.109604,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.109643,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000004-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.109724,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000004-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0012 (18)
>                  name_size                : 0x0012 (18)
>                  name                     : *
>                      name                     : 'Security'
>              type                     : REG_BINARY (3)
>              data                     : *
>                  data: ARRAY(120)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x04 (4)
>                      [3]                      : 0x80 (128)
>                      [4]                      : 0x00 (0)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x00 (0)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x00 (0)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x00 (0)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x00 (0)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x00 (0)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x14 (20)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x00 (0)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x02 (2)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x64 (100)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x04 (4)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x00 (0)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x00 (0)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x14 (20)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x8d (141)
>                      [33]                     : 0x01 (1)
>                      [34]                     : 0x02 (2)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x01 (1)
>                      [37]                     : 0x01 (1)
>                      [38]                     : 0x00 (0)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x00 (0)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x00 (0)
>                      [43]                     : 0x01 (1)
>                      [44]                     : 0x00 (0)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x00 (0)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x00 (0)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x18 (24)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0xfd (253)
>                      [53]                     : 0x01 (1)
>                      [54]                     : 0x02 (2)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x01 (1)
>                      [57]                     : 0x02 (2)
>                      [58]                     : 0x00 (0)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x00 (0)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x00 (0)
>                      [63]                     : 0x05 (5)
>                      [64]                     : 0x20 (32)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x00 (0)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x23 (35)
>                      [69]                     : 0x02 (2)
>                      [70]                     : 0x00 (0)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x00 (0)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x18 (24)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0xff (255)
>                      [77]                     : 0x01 (1)
>                      [78]                     : 0x0f (15)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x01 (1)
>                      [81]                     : 0x02 (2)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x00 (0)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x00 (0)
>                      [87]                     : 0x05 (5)
>                      [88]                     : 0x20 (32)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x00 (0)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x25 (37)
>                      [93]                     : 0x02 (2)
>                      [94]                     : 0x00 (0)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x00 (0)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x18 (24)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0xff (255)
>                      [101]                    : 0x01 (1)
>                      [102]                    : 0x0f (15)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x01 (1)
>                      [105]                    : 0x02 (2)
>                      [106]                    : 0x00 (0)
>                      [107]                    : 0x00 (0)
>                      [108]                    : 0x00 (0)
>                      [109]                    : 0x00 (0)
>                      [110]                    : 0x00 (0)
>                      [111]                    : 0x05 (5)
>                      [112]                    : 0x20 (32)
>                      [113]                    : 0x00 (0)
>                      [114]                    : 0x00 (0)
>                      [115]                    : 0x00 (0)
>                      [116]                    : 0x20 (32)
>                      [117]                    : 0x02 (2)
>                      [118]                    : 0x00 (0)
>                      [119]                    : 0x00 (0)
>              size                     : 0x00000078 (120)
>[2016/07/13 05:20:55.110578,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.110612,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security]
>[2016/07/13 05:20:55.110626,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.110638, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x801c911b0)
>[2016/07/13 05:20:55.110653, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2016/07/13 05:20:55.110671, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Security] len[120]
>[2016/07/13 05:20:55.110685,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.110716,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000004-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.110760,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.110793,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.110825,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.110837, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.110850,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.110909,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0056 (86)
>                  name_size                : 0x0056 (86)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\NETLOGON'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_ACTION_NONE (0)
>[2016/07/13 05:20:55.111106,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.111139, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON'
>[2016/07/13 05:20:55.111167,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.111192,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.111205,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.111218, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.111231, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.111247, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.111260, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.111272, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.111292,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.111307,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.111320, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.111335, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.111347, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.111360, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.111372, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.111393, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.111407,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.111419,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.111432, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.111445, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.111458, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.111471, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.111487, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.111516, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.111530,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [NETLOGON]
>[2016/07/13 05:20:55.111543, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.111556, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2016/07/13 05:20:55.111569, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2016/07/13 05:20:55.111583, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.111595, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2016/07/13 05:20:55.111615, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.111630,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.111664,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.111735,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000c (12)
>                  name_size                : 0x000c (12)
>                  name                     : *
>                      name                     : 'Start'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x02 (2)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.111858,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.111891,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start]
>[2016/07/13 05:20:55.111906,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.111919, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x801c911b0)
>[2016/07/13 05:20:55.111932, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2016/07/13 05:20:55.111953, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Start] len[4]
>[2016/07/13 05:20:55.111967, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[1]: name[Type] len[4]
>[2016/07/13 05:20:55.111981, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
>[2016/07/13 05:20:55.111994, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[3]: name[ObjectName] len[24]
>[2016/07/13 05:20:55.112007, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[4]: name[DisplayName] len[20]
>[2016/07/13 05:20:55.112021, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[5]: name[ImagePath] len[84]
>[2016/07/13 05:20:55.112034, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[6]: name[Description] len[164]
>[2016/07/13 05:20:55.112048,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.112082,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000a (10)
>                  name_size                : 0x000a (10)
>                  name                     : *
>                      name                     : 'Type'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x10 (16)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.112202,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.112235,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type]
>[2016/07/13 05:20:55.112249,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.112265,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.112297,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x001a (26)
>                  name_size                : 0x001a (26)
>                  name                     : *
>                      name                     : 'ErrorControl'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.112478,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.112511,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl]
>[2016/07/13 05:20:55.112525,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.112539,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.112574,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0016 (22)
>                  name_size                : 0x0016 (22)
>                  name                     : *
>                      name                     : 'ObjectName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(24)
>                      [0]                      : 0x4c (76)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x6f (111)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x63 (99)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x61 (97)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x6c (108)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x53 (83)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x79 (121)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x73 (115)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x74 (116)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x65 (101)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x6d (109)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x00 (0)
>                      [23]                     : 0x00 (0)
>              size                     : 0x00000018 (24)
>[2016/07/13 05:20:55.112817,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.112850,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName]
>[2016/07/13 05:20:55.112864,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.112877,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.112914,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'DisplayName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(20)
>                      [0]                      : 0x4e (78)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x65 (101)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x74 (116)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x20 (32)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x4c (76)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6f (111)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x67 (103)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x6f (111)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x6e (110)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x00 (0)
>                      [19]                     : 0x00 (0)
>              size                     : 0x00000014 (20)
>[2016/07/13 05:20:55.113137,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.113170,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName]
>[2016/07/13 05:20:55.113184,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.113198,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.113231,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0014 (20)
>                  name_size                : 0x0014 (20)
>                  name                     : *
>                      name                     : 'ImagePath'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(84)
>                      [0]                      : 0x2f (47)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x75 (117)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x73 (115)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x72 (114)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x2f (47)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6c (108)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x6f (111)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x63 (99)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x61 (97)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x6c (108)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x2f (47)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x6c (108)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x69 (105)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x62 (98)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x2f (47)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x73 (115)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x68 (104)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x61 (97)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x72 (114)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x65 (101)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x64 (100)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x2d (45)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x6d (109)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x6f (111)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x64 (100)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x75 (117)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x6c (108)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x65 (101)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x73 (115)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x2f (47)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x73 (115)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x76 (118)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x63 (99)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x63 (99)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x74 (116)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x6c (108)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x2f (47)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x73 (115)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x6d (109)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x62 (98)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x64 (100)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>              size                     : 0x00000054 (84)
>[2016/07/13 05:20:55.113866,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.113898,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath]
>[2016/07/13 05:20:55.113912,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.113927,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.113960,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'Description'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(164)
>                      [0]                      : 0x46 (70)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x69 (105)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x6c (108)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x65 (101)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x20 (32)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x73 (115)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x65 (101)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x72 (114)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x76 (118)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x69 (105)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x63 (99)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x65 (101)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x20 (32)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x70 (112)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x72 (114)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x6f (111)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x76 (118)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x69 (105)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x64 (100)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x69 (105)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x6e (110)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x67 (103)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x20 (32)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x61 (97)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x63 (99)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x63 (99)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x65 (101)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x73 (115)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x73 (115)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x20 (32)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x74 (116)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x6f (111)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x20 (32)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x70 (112)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x6f (111)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x6c (108)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x69 (105)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x63 (99)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x79 (121)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x20 (32)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x61 (97)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x6e (110)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x64 (100)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x20 (32)
>                      [87]                     : 0x00 (0)
>                      [88]                     : 0x70 (112)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x72 (114)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x6f (111)
>                      [93]                     : 0x00 (0)
>                      [94]                     : 0x66 (102)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x69 (105)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x6c (108)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0x65 (101)
>                      [101]                    : 0x00 (0)
>                      [102]                    : 0x20 (32)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x64 (100)
>                      [105]                    : 0x00 (0)
>                      [106]                    : 0x61 (97)
>                      [107]                    : 0x00 (0)
>                      [108]                    : 0x74 (116)
>                      [109]                    : 0x00 (0)
>                      [110]                    : 0x61 (97)
>                      [111]                    : 0x00 (0)
>                      [112]                    : 0x20 (32)
>                      [113]                    : 0x00 (0)
>                      [114]                    : 0x28 (40)
>                      [115]                    : 0x00 (0)
>                      [116]                    : 0x6e (110)
>                      [117]                    : 0x00 (0)
>                      [118]                    : 0x6f (111)
>                      [119]                    : 0x00 (0)
>                      [120]                    : 0x74 (116)
>                      [121]                    : 0x00 (0)
>                      [122]                    : 0x72 (114)
>                      [123]                    : 0x00 (0)
>                      [124]                    : 0x65 (101)
>                      [125]                    : 0x00 (0)
>                      [126]                    : 0x6d (109)
>                      [127]                    : 0x00 (0)
>                      [128]                    : 0x6f (111)
>                      [129]                    : 0x00 (0)
>                      [130]                    : 0x74 (116)
>                      [131]                    : 0x00 (0)
>                      [132]                    : 0x65 (101)
>                      [133]                    : 0x00 (0)
>                      [134]                    : 0x6c (108)
>                      [135]                    : 0x00 (0)
>                      [136]                    : 0x79 (121)
>                      [137]                    : 0x00 (0)
>                      [138]                    : 0x20 (32)
>                      [139]                    : 0x00 (0)
>                      [140]                    : 0x6d (109)
>                      [141]                    : 0x00 (0)
>                      [142]                    : 0x61 (97)
>                      [143]                    : 0x00 (0)
>                      [144]                    : 0x6e (110)
>                      [145]                    : 0x00 (0)
>                      [146]                    : 0x61 (97)
>                      [147]                    : 0x00 (0)
>                      [148]                    : 0x67 (103)
>                      [149]                    : 0x00 (0)
>                      [150]                    : 0x65 (101)
>                      [151]                    : 0x00 (0)
>                      [152]                    : 0x61 (97)
>                      [153]                    : 0x00 (0)
>                      [154]                    : 0x62 (98)
>                      [155]                    : 0x00 (0)
>                      [156]                    : 0x6c (108)
>                      [157]                    : 0x00 (0)
>                      [158]                    : 0x65 (101)
>                      [159]                    : 0x00 (0)
>                      [160]                    : 0x29 (41)
>                      [161]                    : 0x00 (0)
>                      [162]                    : 0x00 (0)
>                      [163]                    : 0x00 (0)
>              size                     : 0x000000a4 (164)
>[2016/07/13 05:20:55.115060,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.115094,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description]
>[2016/07/13 05:20:55.115107,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.115121,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.115172,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000005-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.115229,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.115261,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.115293,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.115306, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.115319,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.115381,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0068 (104)
>                  name_size                : 0x0068 (104)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>[2016/07/13 05:20:55.115579,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.115612, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
>[2016/07/13 05:20:55.115626,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.115638,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.115655,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.115668, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.115681, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.115694, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.115707, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.115719, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.115738,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.115752,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.115764, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.115777, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.115790, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.115803, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.115815, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.115835, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.115849,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.115861,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.115874, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.115887, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.115899, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.115913, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.115924, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.115955, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.115970,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.115982,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [NETLOGON]
>[2016/07/13 05:20:55.115995, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.116010, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2016/07/13 05:20:55.116023, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2016/07/13 05:20:55.116037, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.116049, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2016/07/13 05:20:55.116069, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.116082,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2016/07/13 05:20:55.116095, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.116108, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2016/07/13 05:20:55.116122, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2016/07/13 05:20:55.116138, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.116150, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2016/07/13 05:20:55.116166, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.116180,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.116214,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000006-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.116288,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000006-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0012 (18)
>                  name_size                : 0x0012 (18)
>                  name                     : *
>                      name                     : 'Security'
>              type                     : REG_BINARY (3)
>              data                     : *
>                  data: ARRAY(120)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x04 (4)
>                      [3]                      : 0x80 (128)
>                      [4]                      : 0x00 (0)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x00 (0)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x00 (0)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x00 (0)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x00 (0)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x00 (0)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x14 (20)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x00 (0)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x02 (2)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x64 (100)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x04 (4)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x00 (0)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x00 (0)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x14 (20)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x8d (141)
>                      [33]                     : 0x01 (1)
>                      [34]                     : 0x02 (2)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x01 (1)
>                      [37]                     : 0x01 (1)
>                      [38]                     : 0x00 (0)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x00 (0)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x00 (0)
>                      [43]                     : 0x01 (1)
>                      [44]                     : 0x00 (0)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x00 (0)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x00 (0)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x18 (24)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0xfd (253)
>                      [53]                     : 0x01 (1)
>                      [54]                     : 0x02 (2)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x01 (1)
>                      [57]                     : 0x02 (2)
>                      [58]                     : 0x00 (0)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x00 (0)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x00 (0)
>                      [63]                     : 0x05 (5)
>                      [64]                     : 0x20 (32)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x00 (0)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x23 (35)
>                      [69]                     : 0x02 (2)
>                      [70]                     : 0x00 (0)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x00 (0)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x18 (24)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0xff (255)
>                      [77]                     : 0x01 (1)
>                      [78]                     : 0x0f (15)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x01 (1)
>                      [81]                     : 0x02 (2)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x00 (0)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x00 (0)
>                      [87]                     : 0x05 (5)
>                      [88]                     : 0x20 (32)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x00 (0)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x25 (37)
>                      [93]                     : 0x02 (2)
>                      [94]                     : 0x00 (0)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x00 (0)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x18 (24)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0xff (255)
>                      [101]                    : 0x01 (1)
>                      [102]                    : 0x0f (15)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x01 (1)
>                      [105]                    : 0x02 (2)
>                      [106]                    : 0x00 (0)
>                      [107]                    : 0x00 (0)
>                      [108]                    : 0x00 (0)
>                      [109]                    : 0x00 (0)
>                      [110]                    : 0x00 (0)
>                      [111]                    : 0x05 (5)
>                      [112]                    : 0x20 (32)
>                      [113]                    : 0x00 (0)
>                      [114]                    : 0x00 (0)
>                      [115]                    : 0x00 (0)
>                      [116]                    : 0x20 (32)
>                      [117]                    : 0x02 (2)
>                      [118]                    : 0x00 (0)
>                      [119]                    : 0x00 (0)
>              size                     : 0x00000078 (120)
>[2016/07/13 05:20:55.117109,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.117142,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security]
>[2016/07/13 05:20:55.117156,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.117169, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x801c911b0)
>[2016/07/13 05:20:55.117182, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2016/07/13 05:20:55.117213, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Security] len[120]
>[2016/07/13 05:20:55.117241,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.117272,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000006-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.117329,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.117363,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.117399,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.117412, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.117425,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.117520,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0062 (98)
>                  name_size                : 0x0062 (98)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_ACTION_NONE (0)
>[2016/07/13 05:20:55.117724,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.117759, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
>[2016/07/13 05:20:55.117773,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.117786,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.117799,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.117813, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.117827, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.117839, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.117853, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.117865, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.117886,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.117900,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.117913, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.117926, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.117939, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.117952, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.117964, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.117984, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.117998,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.118011,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.118024, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.118038, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.118050, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.118064, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.118076, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.118105, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.118123,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [RemoteRegistry]
>[2016/07/13 05:20:55.118136, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.118150, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2016/07/13 05:20:55.118163, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2016/07/13 05:20:55.118177, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.118189, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2016/07/13 05:20:55.118208, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.118223,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.118258,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.118331,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000c (12)
>                  name_size                : 0x000c (12)
>                  name                     : *
>                      name                     : 'Start'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x02 (2)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.118457,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.118495,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start]
>[2016/07/13 05:20:55.118509,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.118522, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x801c911b0)
>[2016/07/13 05:20:55.118535, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2016/07/13 05:20:55.118553, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Start] len[4]
>[2016/07/13 05:20:55.118568, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[1]: name[Type] len[4]
>[2016/07/13 05:20:55.118582, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
>[2016/07/13 05:20:55.118596, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[3]: name[ObjectName] len[24]
>[2016/07/13 05:20:55.118609, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[4]: name[DisplayName] len[48]
>[2016/07/13 05:20:55.118623, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[5]: name[ImagePath] len[84]
>[2016/07/13 05:20:55.118636, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[6]: name[Description] len[126]
>[2016/07/13 05:20:55.118650,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.118687,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000a (10)
>                  name_size                : 0x000a (10)
>                  name                     : *
>                      name                     : 'Type'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x10 (16)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.118808,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.118842,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type]
>[2016/07/13 05:20:55.118856,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.118870,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.118902,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x001a (26)
>                  name_size                : 0x001a (26)
>                  name                     : *
>                      name                     : 'ErrorControl'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.119028,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.119061,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl]
>[2016/07/13 05:20:55.119075,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.119089,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.119123,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0016 (22)
>                  name_size                : 0x0016 (22)
>                  name                     : *
>                      name                     : 'ObjectName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(24)
>                      [0]                      : 0x4c (76)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x6f (111)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x63 (99)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x61 (97)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x6c (108)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x53 (83)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x79 (121)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x73 (115)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x74 (116)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x65 (101)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x6d (109)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x00 (0)
>                      [23]                     : 0x00 (0)
>              size                     : 0x00000018 (24)
>[2016/07/13 05:20:55.119396,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.119429,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName]
>[2016/07/13 05:20:55.119443,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.119457,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.119497,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'DisplayName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(48)
>                      [0]                      : 0x52 (82)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x65 (101)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x6d (109)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x6f (111)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x74 (116)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x65 (101)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x20 (32)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x52 (82)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x65 (101)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x67 (103)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x69 (105)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x73 (115)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x74 (116)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x72 (114)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x79 (121)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x20 (32)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x53 (83)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x65 (101)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x72 (114)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x76 (118)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x69 (105)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x63 (99)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x65 (101)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x00 (0)
>                      [47]                     : 0x00 (0)
>              size                     : 0x00000030 (48)
>[2016/07/13 05:20:55.119889,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.119923,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName]
>[2016/07/13 05:20:55.119936,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.119950,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.119986,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0014 (20)
>                  name_size                : 0x0014 (20)
>                  name                     : *
>                      name                     : 'ImagePath'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(84)
>                      [0]                      : 0x2f (47)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x75 (117)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x73 (115)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x72 (114)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x2f (47)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6c (108)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x6f (111)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x63 (99)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x61 (97)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x6c (108)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x2f (47)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x6c (108)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x69 (105)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x62 (98)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x2f (47)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x73 (115)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x68 (104)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x61 (97)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x72 (114)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x65 (101)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x64 (100)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x2d (45)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x6d (109)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x6f (111)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x64 (100)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x75 (117)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x6c (108)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x65 (101)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x73 (115)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x2f (47)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x73 (115)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x76 (118)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x63 (99)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x63 (99)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x74 (116)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x6c (108)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x2f (47)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x73 (115)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x6d (109)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x62 (98)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x64 (100)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>              size                     : 0x00000054 (84)
>[2016/07/13 05:20:55.120610,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.120656,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath]
>[2016/07/13 05:20:55.120683,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.120696,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.120729,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'Description'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(126)
>                      [0]                      : 0x49 (73)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x6e (110)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x74 (116)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x65 (101)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x72 (114)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6e (110)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x61 (97)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x6c (108)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x20 (32)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x73 (115)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x65 (101)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x72 (114)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x76 (118)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x69 (105)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x63 (99)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x65 (101)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x20 (32)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x70 (112)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x72 (114)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x6f (111)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x76 (118)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x69 (105)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x64 (100)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x69 (105)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x6e (110)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x67 (103)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x20 (32)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x72 (114)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x65 (101)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x6d (109)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x6f (111)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x74 (116)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x65 (101)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x20 (32)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x61 (97)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x63 (99)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x63 (99)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x65 (101)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x73 (115)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x73 (115)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x20 (32)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x74 (116)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x6f (111)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x20 (32)
>                      [87]                     : 0x00 (0)
>                      [88]                     : 0x74 (116)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x68 (104)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x65 (101)
>                      [93]                     : 0x00 (0)
>                      [94]                     : 0x20 (32)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x53 (83)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x61 (97)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0x6d (109)
>                      [101]                    : 0x00 (0)
>                      [102]                    : 0x62 (98)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x61 (97)
>                      [105]                    : 0x00 (0)
>                      [106]                    : 0x20 (32)
>                      [107]                    : 0x00 (0)
>                      [108]                    : 0x72 (114)
>                      [109]                    : 0x00 (0)
>                      [110]                    : 0x65 (101)
>                      [111]                    : 0x00 (0)
>                      [112]                    : 0x67 (103)
>                      [113]                    : 0x00 (0)
>                      [114]                    : 0x69 (105)
>                      [115]                    : 0x00 (0)
>                      [116]                    : 0x73 (115)
>                      [117]                    : 0x00 (0)
>                      [118]                    : 0x74 (116)
>                      [119]                    : 0x00 (0)
>                      [120]                    : 0x72 (114)
>                      [121]                    : 0x00 (0)
>                      [122]                    : 0x79 (121)
>                      [123]                    : 0x00 (0)
>                      [124]                    : 0x00 (0)
>                      [125]                    : 0x00 (0)
>              size                     : 0x0000007e (126)
>[2016/07/13 05:20:55.121592,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.121625,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description]
>[2016/07/13 05:20:55.121638,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.121651,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.121683,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000007-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.121726,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.121758,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.121790,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.121804, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.121817,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.121874,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0074 (116)
>                  name_size                : 0x0074 (116)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>[2016/07/13 05:20:55.122068,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.122100, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
>[2016/07/13 05:20:55.122114,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.122126,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.122139,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.122152, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.122165, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.122178, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.122191, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.122203, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.122222,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.122236,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.122248, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.122261, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.122275, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.122288, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.122299, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.122319, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.122333,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.122346,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.122358, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.122371, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.122384, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.122397, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.122409, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.122439, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.122453,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.122465,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [RemoteRegistry]
>[2016/07/13 05:20:55.122482, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.122495, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2016/07/13 05:20:55.122508, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2016/07/13 05:20:55.122521, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.122533, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2016/07/13 05:20:55.122552, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.122565,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2016/07/13 05:20:55.122578, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.122591, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2016/07/13 05:20:55.122603, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2016/07/13 05:20:55.122617, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.122629, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2016/07/13 05:20:55.122645, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.122659,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.122692,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000008-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.122782,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000008-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0012 (18)
>                  name_size                : 0x0012 (18)
>                  name                     : *
>                      name                     : 'Security'
>              type                     : REG_BINARY (3)
>              data                     : *
>                  data: ARRAY(120)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x04 (4)
>                      [3]                      : 0x80 (128)
>                      [4]                      : 0x00 (0)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x00 (0)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x00 (0)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x00 (0)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x00 (0)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x00 (0)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x14 (20)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x00 (0)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x02 (2)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x64 (100)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x04 (4)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x00 (0)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x00 (0)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x14 (20)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x8d (141)
>                      [33]                     : 0x01 (1)
>                      [34]                     : 0x02 (2)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x01 (1)
>                      [37]                     : 0x01 (1)
>                      [38]                     : 0x00 (0)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x00 (0)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x00 (0)
>                      [43]                     : 0x01 (1)
>                      [44]                     : 0x00 (0)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x00 (0)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x00 (0)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x18 (24)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0xfd (253)
>                      [53]                     : 0x01 (1)
>                      [54]                     : 0x02 (2)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x01 (1)
>                      [57]                     : 0x02 (2)
>                      [58]                     : 0x00 (0)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x00 (0)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x00 (0)
>                      [63]                     : 0x05 (5)
>                      [64]                     : 0x20 (32)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x00 (0)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x23 (35)
>                      [69]                     : 0x02 (2)
>                      [70]                     : 0x00 (0)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x00 (0)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x18 (24)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0xff (255)
>                      [77]                     : 0x01 (1)
>                      [78]                     : 0x0f (15)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x01 (1)
>                      [81]                     : 0x02 (2)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x00 (0)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x00 (0)
>                      [87]                     : 0x05 (5)
>                      [88]                     : 0x20 (32)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x00 (0)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x25 (37)
>                      [93]                     : 0x02 (2)
>                      [94]                     : 0x00 (0)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x00 (0)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x18 (24)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0xff (255)
>                      [101]                    : 0x01 (1)
>                      [102]                    : 0x0f (15)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x01 (1)
>                      [105]                    : 0x02 (2)
>                      [106]                    : 0x00 (0)
>                      [107]                    : 0x00 (0)
>                      [108]                    : 0x00 (0)
>                      [109]                    : 0x00 (0)
>                      [110]                    : 0x00 (0)
>                      [111]                    : 0x05 (5)
>                      [112]                    : 0x20 (32)
>                      [113]                    : 0x00 (0)
>                      [114]                    : 0x00 (0)
>                      [115]                    : 0x00 (0)
>                      [116]                    : 0x20 (32)
>                      [117]                    : 0x02 (2)
>                      [118]                    : 0x00 (0)
>                      [119]                    : 0x00 (0)
>              size                     : 0x00000078 (120)
>[2016/07/13 05:20:55.123662,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.123696,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security]
>[2016/07/13 05:20:55.123711,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.123724, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x801c911b0)
>[2016/07/13 05:20:55.123737, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2016/07/13 05:20:55.123755, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Security] len[120]
>[2016/07/13 05:20:55.123770,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.123805,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000008-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.123851,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.123886,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.123919,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.123932, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.123945,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.124005,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x004e (78)
>                  name_size                : 0x004e (78)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\WINS'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_ACTION_NONE (0)
>[2016/07/13 05:20:55.124206,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.124240, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS'
>[2016/07/13 05:20:55.124254,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.124267,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.124280,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.124294, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.124308, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.124320, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.124334, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.124346, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.124367,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.124381,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.124394, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.124408, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.124420, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.124434, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.124446, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.124467, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.124486,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.124499,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.124512, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.124526, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.124539, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.124552, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.124565, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.124595, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.124608,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [WINS]
>[2016/07/13 05:20:55.124621, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.124635, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2016/07/13 05:20:55.124647, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2016/07/13 05:20:55.124661, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.124673, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2016/07/13 05:20:55.124692, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.124707,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.124741,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.124813,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000c (12)
>                  name_size                : 0x000c (12)
>                  name                     : *
>                      name                     : 'Start'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x02 (2)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.124938,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.124972,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start]
>[2016/07/13 05:20:55.124986,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.124999, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x801c911b0)
>[2016/07/13 05:20:55.125012, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2016/07/13 05:20:55.125033, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Start] len[4]
>[2016/07/13 05:20:55.125049, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[1]: name[Type] len[4]
>[2016/07/13 05:20:55.125063, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
>[2016/07/13 05:20:55.125078, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[3]: name[ObjectName] len[24]
>[2016/07/13 05:20:55.125092, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[4]: name[DisplayName] len[74]
>[2016/07/13 05:20:55.125108, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[5]: name[ImagePath] len[84]
>[2016/07/13 05:20:55.125121, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[6]: name[Description] len[178]
>[2016/07/13 05:20:55.125136,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.125170,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x000a (10)
>                  name_size                : 0x000a (10)
>                  name                     : *
>                      name                     : 'Type'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x10 (16)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.125298,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.125333,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type]
>[2016/07/13 05:20:55.125348,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.125362,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.125395,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x001a (26)
>                  name_size                : 0x001a (26)
>                  name                     : *
>                      name                     : 'ErrorControl'
>              type                     : REG_DWORD (4)
>              data                     : *
>                  data: ARRAY(4)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x00 (0)
>                      [3]                      : 0x00 (0)
>              size                     : 0x00000004 (4)
>[2016/07/13 05:20:55.125524,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.125558,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl]
>[2016/07/13 05:20:55.125572,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.125586,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.125620,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0016 (22)
>                  name_size                : 0x0016 (22)
>                  name                     : *
>                      name                     : 'ObjectName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(24)
>                      [0]                      : 0x4c (76)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x6f (111)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x63 (99)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x61 (97)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x6c (108)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x53 (83)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x79 (121)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x73 (115)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x74 (116)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x65 (101)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x6d (109)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x00 (0)
>                      [23]                     : 0x00 (0)
>              size                     : 0x00000018 (24)
>[2016/07/13 05:20:55.125891,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.125927,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName]
>[2016/07/13 05:20:55.125941,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.125957,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.125993,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'DisplayName'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(74)
>                      [0]                      : 0x57 (87)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x69 (105)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x6e (110)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x64 (100)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x6f (111)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x77 (119)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x73 (115)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x20 (32)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x49 (73)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x6e (110)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x74 (116)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x65 (101)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x72 (114)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x6e (110)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x65 (101)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x74 (116)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x20 (32)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x4e (78)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x61 (97)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x6d (109)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x65 (101)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x20 (32)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x53 (83)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x65 (101)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x72 (114)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x76 (118)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x69 (105)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x63 (99)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x65 (101)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x20 (32)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x28 (40)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x57 (87)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x49 (73)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x4e (78)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x53 (83)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x29 (41)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x00 (0)
>                      [73]                     : 0x00 (0)
>              size                     : 0x0000004a (74)
>[2016/07/13 05:20:55.126566,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.126600,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName]
>[2016/07/13 05:20:55.126613,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.126627,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.126664,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0014 (20)
>                  name_size                : 0x0014 (20)
>                  name                     : *
>                      name                     : 'ImagePath'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(84)
>                      [0]                      : 0x2f (47)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x75 (117)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x73 (115)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x72 (114)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x2f (47)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6c (108)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x6f (111)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x63 (99)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x61 (97)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x6c (108)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x2f (47)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x6c (108)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x69 (105)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x62 (98)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x2f (47)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x73 (115)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x68 (104)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x61 (97)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x72 (114)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x65 (101)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x64 (100)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x2d (45)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x6d (109)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x6f (111)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x64 (100)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x75 (117)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x6c (108)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x65 (101)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x73 (115)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x2f (47)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x73 (115)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x76 (118)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x63 (99)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x63 (99)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x74 (116)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x6c (108)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x2f (47)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x6e (110)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x6d (109)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x62 (98)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x64 (100)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>              size                     : 0x00000054 (84)
>[2016/07/13 05:20:55.127284,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.127318,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath]
>[2016/07/13 05:20:55.127331,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.127346,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.127383,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0018 (24)
>                  name_size                : 0x0018 (24)
>                  name                     : *
>                      name                     : 'Description'
>              type                     : REG_SZ (1)
>              data                     : *
>                  data: ARRAY(178)
>                      [0]                      : 0x49 (73)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x6e (110)
>                      [3]                      : 0x00 (0)
>                      [4]                      : 0x74 (116)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x65 (101)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x72 (114)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x6e (110)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x61 (97)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x6c (108)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x20 (32)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x73 (115)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x65 (101)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x72 (114)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x76 (118)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x69 (105)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x63 (99)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x65 (101)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x20 (32)
>                      [33]                     : 0x00 (0)
>                      [34]                     : 0x70 (112)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x72 (114)
>                      [37]                     : 0x00 (0)
>                      [38]                     : 0x6f (111)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x76 (118)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x69 (105)
>                      [43]                     : 0x00 (0)
>                      [44]                     : 0x64 (100)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x69 (105)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x6e (110)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x67 (103)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0x20 (32)
>                      [53]                     : 0x00 (0)
>                      [54]                     : 0x61 (97)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x20 (32)
>                      [57]                     : 0x00 (0)
>                      [58]                     : 0x4e (78)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x65 (101)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x74 (116)
>                      [63]                     : 0x00 (0)
>                      [64]                     : 0x42 (66)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x49 (73)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x4f (79)
>                      [69]                     : 0x00 (0)
>                      [70]                     : 0x53 (83)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x20 (32)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x70 (112)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0x6f (111)
>                      [77]                     : 0x00 (0)
>                      [78]                     : 0x69 (105)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x6e (110)
>                      [81]                     : 0x00 (0)
>                      [82]                     : 0x74 (116)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x2d (45)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x74 (116)
>                      [87]                     : 0x00 (0)
>                      [88]                     : 0x6f (111)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x2d (45)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x70 (112)
>                      [93]                     : 0x00 (0)
>                      [94]                     : 0x6f (111)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x69 (105)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x6e (110)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0x74 (116)
>                      [101]                    : 0x00 (0)
>                      [102]                    : 0x20 (32)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x6e (110)
>                      [105]                    : 0x00 (0)
>                      [106]                    : 0x61 (97)
>                      [107]                    : 0x00 (0)
>                      [108]                    : 0x6d (109)
>                      [109]                    : 0x00 (0)
>                      [110]                    : 0x65 (101)
>                      [111]                    : 0x00 (0)
>                      [112]                    : 0x20 (32)
>                      [113]                    : 0x00 (0)
>                      [114]                    : 0x73 (115)
>                      [115]                    : 0x00 (0)
>                      [116]                    : 0x65 (101)
>                      [117]                    : 0x00 (0)
>                      [118]                    : 0x72 (114)
>                      [119]                    : 0x00 (0)
>                      [120]                    : 0x76 (118)
>                      [121]                    : 0x00 (0)
>                      [122]                    : 0x65 (101)
>                      [123]                    : 0x00 (0)
>                      [124]                    : 0x72 (114)
>                      [125]                    : 0x00 (0)
>                      [126]                    : 0x28 (40)
>                      [127]                    : 0x00 (0)
>                      [128]                    : 0x6e (110)
>                      [129]                    : 0x00 (0)
>                      [130]                    : 0x6f (111)
>                      [131]                    : 0x00 (0)
>                      [132]                    : 0x74 (116)
>                      [133]                    : 0x00 (0)
>                      [134]                    : 0x20 (32)
>                      [135]                    : 0x00 (0)
>                      [136]                    : 0x72 (114)
>                      [137]                    : 0x00 (0)
>                      [138]                    : 0x65 (101)
>                      [139]                    : 0x00 (0)
>                      [140]                    : 0x6d (109)
>                      [141]                    : 0x00 (0)
>                      [142]                    : 0x6f (111)
>                      [143]                    : 0x00 (0)
>                      [144]                    : 0x74 (116)
>                      [145]                    : 0x00 (0)
>                      [146]                    : 0x65 (101)
>                      [147]                    : 0x00 (0)
>                      [148]                    : 0x6c (108)
>                      [149]                    : 0x00 (0)
>                      [150]                    : 0x79 (121)
>                      [151]                    : 0x00 (0)
>                      [152]                    : 0x20 (32)
>                      [153]                    : 0x00 (0)
>                      [154]                    : 0x6d (109)
>                      [155]                    : 0x00 (0)
>                      [156]                    : 0x61 (97)
>                      [157]                    : 0x00 (0)
>                      [158]                    : 0x6e (110)
>                      [159]                    : 0x00 (0)
>                      [160]                    : 0x61 (97)
>                      [161]                    : 0x00 (0)
>                      [162]                    : 0x67 (103)
>                      [163]                    : 0x00 (0)
>                      [164]                    : 0x65 (101)
>                      [165]                    : 0x00 (0)
>                      [166]                    : 0x61 (97)
>                      [167]                    : 0x00 (0)
>                      [168]                    : 0x62 (98)
>                      [169]                    : 0x00 (0)
>                      [170]                    : 0x6c (108)
>                      [171]                    : 0x00 (0)
>                      [172]                    : 0x65 (101)
>                      [173]                    : 0x00 (0)
>                      [174]                    : 0x29 (41)
>                      [175]                    : 0x00 (0)
>                      [176]                    : 0x00 (0)
>                      [177]                    : 0x00 (0)
>              size                     : 0x000000b2 (178)
>[2016/07/13 05:20:55.128669,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.128703,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description]
>[2016/07/13 05:20:55.128717,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.128732,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.128765,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.128811,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.128845,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.128878,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.128892, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.128905,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.128965,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          in: struct winreg_CreateKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0060 (96)
>                  name_size                : 0x0060 (96)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\WINS\Security'
>              keyclass: struct winreg_String
>                  name_len                 : 0x0002 (2)
>                  name_size                : 0x0002 (2)
>                  name                     : *
>                      name                     : ''
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>              secdesc                  : NULL
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>[2016/07/13 05:20:55.129165,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.129204, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey)
>  _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security'
>[2016/07/13 05:20:55.129218,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.129231,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.129245,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.129259, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.129273, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.129288, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.129302, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.129314, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.129336,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.129349,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.129362, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.129376, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.129388, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.129402, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.129414, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.129436, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.129450,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.129463,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.129480, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.129495, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.129509, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.129525, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.129539, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.129571, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.129586,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 2
>[2016/07/13 05:20:55.129601,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [WINS]
>[2016/07/13 05:20:55.129616, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.129631, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2016/07/13 05:20:55.129645, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2016/07/13 05:20:55.129659, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.129671, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2016/07/13 05:20:55.129690, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.129704,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2016/07/13 05:20:55.129717, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.129730, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2016/07/13 05:20:55.129743, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2016/07/13 05:20:55.129758, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.129772, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2016/07/13 05:20:55.129790, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.129806,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.129842,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CreateKey: struct winreg_CreateKey
>          out: struct winreg_CreateKey
>              new_handle               : *
>                  new_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000a-0000-0000-8657-2732b3460000
>              action_taken             : *
>                  action_taken             : REG_OPENED_EXISTING_KEY (2)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.129926,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          in: struct winreg_SetValue
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000a-0000-0000-8657-2732b3460000
>              name: struct winreg_String
>                  name_len                 : 0x0012 (18)
>                  name_size                : 0x0012 (18)
>                  name                     : *
>                      name                     : 'Security'
>              type                     : REG_BINARY (3)
>              data                     : *
>                  data: ARRAY(120)
>                      [0]                      : 0x01 (1)
>                      [1]                      : 0x00 (0)
>                      [2]                      : 0x04 (4)
>                      [3]                      : 0x80 (128)
>                      [4]                      : 0x00 (0)
>                      [5]                      : 0x00 (0)
>                      [6]                      : 0x00 (0)
>                      [7]                      : 0x00 (0)
>                      [8]                      : 0x00 (0)
>                      [9]                      : 0x00 (0)
>                      [10]                     : 0x00 (0)
>                      [11]                     : 0x00 (0)
>                      [12]                     : 0x00 (0)
>                      [13]                     : 0x00 (0)
>                      [14]                     : 0x00 (0)
>                      [15]                     : 0x00 (0)
>                      [16]                     : 0x14 (20)
>                      [17]                     : 0x00 (0)
>                      [18]                     : 0x00 (0)
>                      [19]                     : 0x00 (0)
>                      [20]                     : 0x02 (2)
>                      [21]                     : 0x00 (0)
>                      [22]                     : 0x64 (100)
>                      [23]                     : 0x00 (0)
>                      [24]                     : 0x04 (4)
>                      [25]                     : 0x00 (0)
>                      [26]                     : 0x00 (0)
>                      [27]                     : 0x00 (0)
>                      [28]                     : 0x00 (0)
>                      [29]                     : 0x00 (0)
>                      [30]                     : 0x14 (20)
>                      [31]                     : 0x00 (0)
>                      [32]                     : 0x8d (141)
>                      [33]                     : 0x01 (1)
>                      [34]                     : 0x02 (2)
>                      [35]                     : 0x00 (0)
>                      [36]                     : 0x01 (1)
>                      [37]                     : 0x01 (1)
>                      [38]                     : 0x00 (0)
>                      [39]                     : 0x00 (0)
>                      [40]                     : 0x00 (0)
>                      [41]                     : 0x00 (0)
>                      [42]                     : 0x00 (0)
>                      [43]                     : 0x01 (1)
>                      [44]                     : 0x00 (0)
>                      [45]                     : 0x00 (0)
>                      [46]                     : 0x00 (0)
>                      [47]                     : 0x00 (0)
>                      [48]                     : 0x00 (0)
>                      [49]                     : 0x00 (0)
>                      [50]                     : 0x18 (24)
>                      [51]                     : 0x00 (0)
>                      [52]                     : 0xfd (253)
>                      [53]                     : 0x01 (1)
>                      [54]                     : 0x02 (2)
>                      [55]                     : 0x00 (0)
>                      [56]                     : 0x01 (1)
>                      [57]                     : 0x02 (2)
>                      [58]                     : 0x00 (0)
>                      [59]                     : 0x00 (0)
>                      [60]                     : 0x00 (0)
>                      [61]                     : 0x00 (0)
>                      [62]                     : 0x00 (0)
>                      [63]                     : 0x05 (5)
>                      [64]                     : 0x20 (32)
>                      [65]                     : 0x00 (0)
>                      [66]                     : 0x00 (0)
>                      [67]                     : 0x00 (0)
>                      [68]                     : 0x23 (35)
>                      [69]                     : 0x02 (2)
>                      [70]                     : 0x00 (0)
>                      [71]                     : 0x00 (0)
>                      [72]                     : 0x00 (0)
>                      [73]                     : 0x00 (0)
>                      [74]                     : 0x18 (24)
>                      [75]                     : 0x00 (0)
>                      [76]                     : 0xff (255)
>                      [77]                     : 0x01 (1)
>                      [78]                     : 0x0f (15)
>                      [79]                     : 0x00 (0)
>                      [80]                     : 0x01 (1)
>                      [81]                     : 0x02 (2)
>                      [82]                     : 0x00 (0)
>                      [83]                     : 0x00 (0)
>                      [84]                     : 0x00 (0)
>                      [85]                     : 0x00 (0)
>                      [86]                     : 0x00 (0)
>                      [87]                     : 0x05 (5)
>                      [88]                     : 0x20 (32)
>                      [89]                     : 0x00 (0)
>                      [90]                     : 0x00 (0)
>                      [91]                     : 0x00 (0)
>                      [92]                     : 0x25 (37)
>                      [93]                     : 0x02 (2)
>                      [94]                     : 0x00 (0)
>                      [95]                     : 0x00 (0)
>                      [96]                     : 0x00 (0)
>                      [97]                     : 0x00 (0)
>                      [98]                     : 0x18 (24)
>                      [99]                     : 0x00 (0)
>                      [100]                    : 0xff (255)
>                      [101]                    : 0x01 (1)
>                      [102]                    : 0x0f (15)
>                      [103]                    : 0x00 (0)
>                      [104]                    : 0x01 (1)
>                      [105]                    : 0x02 (2)
>                      [106]                    : 0x00 (0)
>                      [107]                    : 0x00 (0)
>                      [108]                    : 0x00 (0)
>                      [109]                    : 0x00 (0)
>                      [110]                    : 0x00 (0)
>                      [111]                    : 0x05 (5)
>                      [112]                    : 0x20 (32)
>                      [113]                    : 0x00 (0)
>                      [114]                    : 0x00 (0)
>                      [115]                    : 0x00 (0)
>                      [116]                    : 0x20 (32)
>                      [117]                    : 0x02 (2)
>                      [118]                    : 0x00 (0)
>                      [119]                    : 0x00 (0)
>              size                     : 0x00000078 (120)
>[2016/07/13 05:20:55.130835,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.130870,  8, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue)
>  _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security]
>[2016/07/13 05:20:55.130884,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)
>  tdb(/var/db/samba4/registry.tdb): tdb_transaction_start: nesting 1
>[2016/07/13 05:20:55.130897, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x801c911b0)
>[2016/07/13 05:20:55.130911, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2016/07/13 05:20:55.130928, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[Security] len[120]
>[2016/07/13 05:20:55.130943,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_SetValue: struct winreg_SetValue
>          out: struct winreg_SetValue
>              result                   : WERR_OK
>[2016/07/13 05:20:55.130975,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000a-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.131020,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.131053,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.131086,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.131104, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.131117,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.131172,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000002-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.131219,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.131254,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.131288,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.131303, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (3->2)
>[2016/07/13 05:20:55.131319,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.131381, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (2->1)
>[2016/07/13 05:20:55.131404, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (1->0)
>[2016/07/13 05:20:55.131436, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:417(close_policy_by_pipe)
>  Deleted handle list for RPC connection winreg
>[2016/07/13 05:20:55.131469,  3, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg)
>  Initialise the eventlog registry keys if needed.
>[2016/07/13 05:20:55.131500,  4, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p)
>  Create pipe requested winreg
>[2016/07/13 05:20:55.131517, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:222(init_pipe_handles)
>  init_pipe_handle_list: created handle list for pipe winreg
>[2016/07/13 05:20:55.131535, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:239(init_pipe_handles)
>  init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg
>[2016/07/13 05:20:55.131569,  4, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p)
>  Created internal pipe winreg
>[2016/07/13 05:20:55.131591,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenHKLM: struct winreg_OpenHKLM
>          in: struct winreg_OpenHKLM
>              system_name              : NULL
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>[2016/07/13 05:20:55.131677,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2016/07/13 05:20:55.131705,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.131721,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.131736,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:20:55.131750,  5, pid=18099, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:20:55.131765,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:20:55.131826,  4, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:20:55.131844, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open)
>  regdb_open: registry db opened. refcount reset (1)
>[2016/07/13 05:20:55.131859, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM]
>[2016/07/13 05:20:55.131873, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM]
>[2016/07/13 05:20:55.131890, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.131904, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM]
>[2016/07/13 05:20:55.131931,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.131968,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenHKLM: struct winreg_OpenHKLM
>          out: struct winreg_OpenHKLM
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000b-0000-0000-8657-2732b3460000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.132032,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenKey: struct winreg_OpenKey
>          in: struct winreg_OpenKey
>              parent_handle            : *
>                  parent_handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000b-0000-0000-8657-2732b3460000
>              keyname: struct winreg_String
>                  name_len                 : 0x0056 (86)
>                  name_size                : 0x0056 (86)
>                  name                     : *
>                      name                     : 'SYSTEM\CurrentControlSet\Services\Eventlog'
>              options                  : 0x00000000 (0)
>                     0: REG_OPTION_VOLATILE      
>                     0: REG_OPTION_CREATE_LINK   
>                     0: REG_OPTION_BACKUP_RESTORE
>                     0: REG_OPTION_OPEN_LINK     
>              access_mask              : 0x02000000 (33554432)
>                     0: KEY_QUERY_VALUE          
>                     0: KEY_SET_VALUE            
>                     0: KEY_CREATE_SUB_KEY       
>                     0: KEY_ENUMERATE_SUB_KEYS   
>                     0: KEY_NOTIFY               
>                     0: KEY_CREATE_LINK          
>                     0: KEY_WOW64_64KEY          
>                     0: KEY_WOW64_32KEY          
>[2016/07/13 05:20:55.132205,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.132242,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2016/07/13 05:20:55.132257, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (1->2)
>[2016/07/13 05:20:55.132272, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.132286, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.132301, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.132315, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM]
>[2016/07/13 05:20:55.132338,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2016/07/13 05:20:55.132353, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (2->3)
>[2016/07/13 05:20:55.132368, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.132382, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.132397, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.132410, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet]
>[2016/07/13 05:20:55.132433,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2016/07/13 05:20:55.132448, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (3->4)
>[2016/07/13 05:20:55.132463, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.132480, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.132496, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.132510, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services]
>[2016/07/13 05:20:55.132544,  7, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Eventlog]
>[2016/07/13 05:20:55.132558, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open)
>  regdb_open: incrementing refcount (4->5)
>[2016/07/13 05:20:55.132572, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
>[2016/07/13 05:20:55.132586, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find)
>  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
>[2016/07/13 05:20:55.132602, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find)
>  pathtree_find: Exit
>[2016/07/13 05:20:55.132616, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x801c911b0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
>[2016/07/13 05:20:55.132637, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (5->4)
>[2016/07/13 05:20:55.132651, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (4->3)
>[2016/07/13 05:20:55.132665, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (3->2)
>[2016/07/13 05:20:55.132680,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:303(create_rpc_handle_internal)
>  Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.132717,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_OpenKey: struct winreg_OpenKey
>          out: struct winreg_OpenKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-8657-2732b3460000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.132780,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_QueryInfoKey: struct winreg_QueryInfoKey
>          in: struct winreg_QueryInfoKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-8657-2732b3460000
>              classname                : *
>                  classname: struct winreg_String
>                      name_len                 : 0x0000 (0)
>                      name_size                : 0x0000 (0)
>                      name                     : NULL
>[2016/07/13 05:20:55.132861,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.132898, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x801c911b0)
>[2016/07/13 05:20:55.132912, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1910(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
>[2016/07/13 05:20:55.132933, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[0]: name[DisplayName] len[20]
>[2016/07/13 05:20:55.132948, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1855(regdb_unpack_values)
>  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
>[2016/07/13 05:20:55.132963, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2093(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
>[2016/07/13 05:20:55.132985,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_QueryInfoKey: struct winreg_QueryInfoKey
>          out: struct winreg_QueryInfoKey
>              classname                : *
>                  classname: struct winreg_String
>                      name_len                 : 0x0000 (0)
>                      name_size                : 0x0000 (0)
>                      name                     : NULL
>              num_subkeys              : *
>                  num_subkeys              : 0x00000000 (0)
>              max_subkeylen            : *
>                  max_subkeylen            : 0x00000000 (0)
>              max_classlen             : *
>                  max_classlen             : 0x00000000 (0)
>              num_values               : *
>                  num_values               : 0x00000002 (2)
>              max_valnamelen           : *
>                  max_valnamelen           : 0x0000001a (26)
>              max_valbufsize           : *
>                  max_valbufsize           : 0x00000014 (20)
>              secdescsize              : *
>                  secdescsize              : 0x00000078 (120)
>              last_changed_time        : *
>                  last_changed_time        : NTTIME(0)
>              result                   : WERR_OK
>[2016/07/13 05:20:55.133155,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          in: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-8657-2732b3460000
>[2016/07/13 05:20:55.133201,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.133235,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:338(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 86 57 27 32   ........ .....W'2
>  [0010] B3 46 00 00                                        .F.. 
>[2016/07/13 05:20:55.133284,  6, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:387(close_policy_hnd)
>  Closed policy
>[2016/07/13 05:20:55.133298, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (2->1)
>[2016/07/13 05:20:55.133312,  1, pid=18099, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>       winreg_CloseKey: struct winreg_CloseKey
>          out: struct winreg_CloseKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2016/07/13 05:20:55.133368, 10, pid=18099, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close)
>  regdb_close: decrementing refcount (1->0)
>[2016/07/13 05:20:55.133407, 10, pid=18099, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:417(close_policy_by_pipe)
>  Deleted handle list for RPC connection winreg
>[2016/07/13 05:20:55.133431,  0, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:124(daemon_ready)
>  STATUS=daemon 'smbd' finished starting up and ready to serve connections
>[2016/07/13 05:20:55.133466, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in)
>  bind succeeded on port 445
>[2016/07/13 05:20:55.133490,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.133586,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 4
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.133684, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in)
>  bind succeeded on port 139
>[2016/07/13 05:20:55.133699,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.133792,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 4
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.133890, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in)
>  bind succeeded on port 445
>[2016/07/13 05:20:55.133904,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.133997,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 4
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.134093, 10, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in)
>  bind succeeded on port 139
>[2016/07/13 05:20:55.134107,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.134200,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 4
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 32768
>  	SO_RCVBUF = 65536
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:55.134293,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 2 for /var/lock/serverid.tdb
>[2016/07/13 05:20:55.134310, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:/var/lock/serverid.tdb 3:<none>
>[2016/07/13 05:20:55.134328, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key B346000000000000FFFF
>[2016/07/13 05:20:55.134344, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x812043ea0
>[2016/07/13 05:20:55.134365, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key B346000000000000FFFF
>[2016/07/13 05:20:55.134379,  5, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 2 for /var/lock/serverid.tdb
>[2016/07/13 05:20:55.134393, 10, pid=18099, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:20:55.134407,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 13 - private_data=0x0
>[2016/07/13 05:20:55.134420,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 33 - private_data=0x812050400
>[2016/07/13 05:20:55.134433,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 783 - private_data=0x0
>[2016/07/13 05:20:55.134446,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 1 - private_data=0x0
>[2016/07/13 05:20:55.134458,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:461(messaging_register)
>  Overriding messaging pointer for type 1 - private_data=0x0
>[2016/07/13 05:20:55.134470,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 785 - private_data=0x0
>[2016/07/13 05:20:55.134487,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 770 - private_data=0x0
>[2016/07/13 05:20:55.134500,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 790 - private_data=0x0
>[2016/07/13 05:20:55.134513,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 791 - private_data=0x0
>[2016/07/13 05:20:55.134525,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 15 - private_data=0x0
>[2016/07/13 05:20:55.134538,  5, pid=18099, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 16 - private_data=0x0
>[2016/07/13 05:20:55.134560,  2, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1009(smbd_parent_loop)
>  waiting for connections
>[2016/07/13 05:20:55.134576,  6, pid=18099, effective(0, 0), real(0, 0)] ../source3/smbd/dnsregister.c:101(dns_register_smbd_retry)
>  registering _smb._tcp service on port 445
>[2016/07/13 05:20:56.573583,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 2 for /var/lock/serverid.tdb
>[2016/07/13 05:20:56.573623, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:/var/lock/serverid.tdb 3:<none>
>[2016/07/13 05:20:56.573645, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key CC46000000000000FFFF
>[2016/07/13 05:20:56.573668, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x812043ba0
>[2016/07/13 05:20:56.573690, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key CC46000000000000FFFF
>[2016/07/13 05:20:56.573705,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 2 for /var/lock/serverid.tdb
>[2016/07/13 05:20:56.573718, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:20:56.573745,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 4
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 33304
>  	SO_RCVBUF = 66608
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:56.573854,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:890(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 8
>  	SO_REUSEADDR = 4
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 4
>  	TCP_KEEPCNT = 0
>  	TCP_KEEPIDLE = 0
>  	TCP_KEEPINTVL = 0
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_REUSEPORT = 512
>  	SO_SNDBUF = 33304
>  	SO_RCVBUF = 66608
>  	SO_SNDLOWAT = 2048
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2016/07/13 05:20:56.576842,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access)
>  Allowed connection from stargate.home.gateway (192.168.1.200)
>[2016/07/13 05:20:56.576870, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3749(smbd_add_connection)
>  Connection allowed from ipv4:192.168.1.200:48016 to ipv4:192.168.1.101:445
>[2016/07/13 05:20:56.576934,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2214(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/etc/smb4.conf -> /usr/local/etc/smb4.conf  last mod_time: Wed Jul 13 05:20:54 2016
>  
>[2016/07/13 05:20:56.576987,  3, pid=18124, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1309(init_oplocks)
>  init_oplocks: initializing messages.
>[2016/07/13 05:20:56.577002,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 774 - private_data=0x81209f660
>[2016/07/13 05:20:56.577016,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 778 - private_data=0x81209f660
>[2016/07/13 05:20:56.577029,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 770 - private_data=0x81209f660
>[2016/07/13 05:20:56.577042,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 787 - private_data=0x81209f660
>[2016/07/13 05:20:56.577056,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 779 - private_data=0x81209f660
>[2016/07/13 05:20:56.577069,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 15 - private_data=0x0
>[2016/07/13 05:20:56.577082,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:461(messaging_register)
>  Overriding messaging pointer for type 15 - private_data=0x0
>[2016/07/13 05:20:56.577096,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:493(messaging_deregister)
>  Deregistering messaging pointer for type 16 - private_data=0x0
>[2016/07/13 05:20:56.577109,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 16 - private_data=0x81209f660
>[2016/07/13 05:20:56.577122,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:493(messaging_deregister)
>  Deregistering messaging pointer for type 33 - private_data=0x812050400
>[2016/07/13 05:20:56.577135,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 33 - private_data=0x81209f660
>[2016/07/13 05:20:56.577148,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:493(messaging_deregister)
>  Deregistering messaging pointer for type 790 - private_data=0x0
>[2016/07/13 05:20:56.577161,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 790 - private_data=0x81209f660
>[2016/07/13 05:20:56.577174,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:493(messaging_deregister)
>  Deregistering messaging pointer for type 791 - private_data=0x0
>[2016/07/13 05:20:56.577187,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:493(messaging_deregister)
>  Deregistering messaging pointer for type 1 - private_data=0x0
>[2016/07/13 05:20:56.577200,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 1 - private_data=0x0
>[2016/07/13 05:20:56.577217, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle)
>  event_add_idle: idle_evt(keepalive) 0x812043c60
>[2016/07/13 05:20:56.577231, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle)
>  event_add_idle: idle_evt(deadtime) 0x812043d20
>[2016/07/13 05:20:56.577245, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle)
>  event_add_idle: idle_evt(housekeeping) 0x812043de0
>[2016/07/13 05:21:03.491370, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 78
>[2016/07/13 05:21:03.491441,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0x4e
>[2016/07/13 05:21:03.491457,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 0 of length 82 (0 toread)
>[2016/07/13 05:21:03.491472,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.491486,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=78
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=1339
>  smb_uid=0
>  smb_mid=105
>  smt_wct=0
>  smb_bcc=43
>[2016/07/13 05:21:03.491556, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 02 4C 4D 31 2E 32 58 30   30 32 00 02 4C 41 4E 4D   .LM1.2X0 02..LANM
>  [0010] 41 4E 32 2E 31 00 02 4E   54 20 4C 4D 20 30 2E 31   AN2.1..N T LM 0.1
>  [0020] 32 00 02 50 4F 53 49 58   20 32 00                  2..POSIX  2.
>[2016/07/13 05:21:03.491617,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBnegprot (pid 18124) conn 0x0
>[2016/07/13 05:21:03.491635,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.491650,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.491665,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.491698,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2016/07/13 05:21:03.492453,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot)
>  Requested protocol [LM1.2X002]
>[2016/07/13 05:21:03.492496,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot)
>  Requested protocol [LANMAN2.1]
>[2016/07/13 05:21:03.492512,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot)
>  Requested protocol [NT LM 0.12]
>[2016/07/13 05:21:03.492526,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot)
>  Requested protocol [POSIX 2]
>[2016/07/13 05:21:03.492541, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1292(set_remote_arch)
>  set_remote_arch: Client arch is 'CIFSFS'
>[2016/07/13 05:21:03.492587,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2214(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/etc/smb4.conf -> /usr/local/etc/smb4.conf  last mod_time: Wed Jul 13 05:20:54 2016
>  
>[2016/07/13 05:21:03.492629,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 2 for /var/lock/serverid.tdb
>[2016/07/13 05:21:03.492644, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:/var/lock/serverid.tdb 3:<none>
>[2016/07/13 05:21:03.492661, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key CC46000000000000FFFF
>[2016/07/13 05:21:03.492681, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x8120b5710
>[2016/07/13 05:21:03.492708, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key CC46000000000000FFFF
>[2016/07/13 05:21:03.492726,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 2 for /var/lock/serverid.tdb
>[2016/07/13 05:21:03.492739, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:21:03.492773,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2214(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/etc/smb4.conf -> /usr/local/etc/smb4.conf  last mod_time: Wed Jul 13 05:20:54 2016
>  
>[2016/07/13 05:21:03.492836,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:491(make_auth_context_subsystem)
>  Making default auth method list for server role = 'standalone server', encrypt passwords = yes
>[2016/07/13 05:21:03.492858,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
>  Attempting to register auth backend sam
>[2016/07/13 05:21:03.492876,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
>  Successfully added auth method 'sam'
>[2016/07/13 05:21:03.492891,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
>  Attempting to register auth backend sam_ignoredomain
>[2016/07/13 05:21:03.492905,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
>  Successfully added auth method 'sam_ignoredomain'
>[2016/07/13 05:21:03.492919,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
>  Attempting to register auth backend winbind
>[2016/07/13 05:21:03.492933,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
>  Successfully added auth method 'winbind'
>[2016/07/13 05:21:03.492946,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
>  Attempting to register auth backend trustdomain
>[2016/07/13 05:21:03.492960,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
>  Successfully added auth method 'trustdomain'
>[2016/07/13 05:21:03.492973,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
>  Attempting to register auth backend ntdomain
>[2016/07/13 05:21:03.492986,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
>  Successfully added auth method 'ntdomain'
>[2016/07/13 05:21:03.493000,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)
>  Attempting to register auth backend guest
>[2016/07/13 05:21:03.493014,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)
>  Successfully added auth method 'guest'
>[2016/07/13 05:21:03.493027,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match guest
>[2016/07/13 05:21:03.493041,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module)
>  load_auth_module: auth method guest has a valid init
>[2016/07/13 05:21:03.493054,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match sam
>[2016/07/13 05:21:03.493068,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module)
>  load_auth_module: auth method sam has a valid init
>[2016/07/13 05:21:03.493499,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'gssapi_spnego' registered
>[2016/07/13 05:21:03.493522,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'gssapi_krb5' registered
>[2016/07/13 05:21:03.493536,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'gssapi_krb5_sasl' registered
>[2016/07/13 05:21:03.493551,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'spnego' registered
>[2016/07/13 05:21:03.493565,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'schannel' registered
>[2016/07/13 05:21:03.493579,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'naclrpc_as_system' registered
>[2016/07/13 05:21:03.493593,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'sasl-EXTERNAL' registered
>[2016/07/13 05:21:03.493608,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'ntlmssp' registered
>[2016/07/13 05:21:03.493622,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'http_basic' registered
>[2016/07/13 05:21:03.493638,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'http_ntlm' registered
>[2016/07/13 05:21:03.493653,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'krb5' registered
>[2016/07/13 05:21:03.493667,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:899(gensec_register)
>  GENSEC backend 'fake_gssapi_krb5' registered
>[2016/07/13 05:21:03.493704,  5, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
>  Starting GENSEC mechanism spnego
>[2016/07/13 05:21:03.493730,  5, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
>  Starting GENSEC submechanism ntlmssp
>[2016/07/13 05:21:03.493772,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:395(reply_nt1)
>  using SPNEGO
>[2016/07/13 05:21:03.493789,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:683(reply_negprot)
>  Selected protocol NT LM 0.12
>[2016/07/13 05:21:03.493802,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:690(reply_negprot)
>  negprot index=2
>[2016/07/13 05:21:03.493815,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.493824,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=159
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=128
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=1339
>  smb_uid=0
>  smb_mid=105
>  smt_wct=17
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=52224 (0xCC00)
>  smb_vwv[ 8]=   70 (0x46)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=33011 (0x80F3)
>  smb_vwv[11]=44672 (0xAE80)
>  smb_vwv[12]=62036 (0xF254)
>  smb_vwv[13]=  261 (0x105)
>  smb_vwv[14]=53725 (0xD1DD)
>  smb_vwv[15]=41985 (0xA401)
>  smb_vwv[16]=    1 (0x1)
>  smb_bcc=90
>[2016/07/13 05:21:03.493981, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 66 72 65 65 6E 61 73 2D   74 65 73 74 00 00 00 00   freenas- test....
>  [0010] 60 48 06 06 2B 06 01 05   05 02 A0 3E 30 3C A0 0E   `H..+... ...>0<..
>  [0020] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A3 2A   0...+... ..7....*
>  [0030] 30 28 A0 26 1B 24 6E 6F   74 5F 64 65 66 69 6E 65   0(.&.$no t_define
>  [0040] 64 5F 69 6E 5F 52 46 43   34 31 37 38 40 70 6C 65   d_in_RFC 4178@ple
>  [0050] 61 73 65 5F 69 67 6E 6F   72 65                     ase_igno re
>[2016/07/13 05:21:03.494232, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 202
>[2016/07/13 05:21:03.494262,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0xca
>[2016/07/13 05:21:03.494277,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 1 of length 206 (0 toread)
>[2016/07/13 05:21:03.494291,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.494299,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=202
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=1339
>  smb_uid=0
>  smb_mid=106
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=16468 (0x4054)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   32 (0x20)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=53468 (0xD0DC)
>  smb_vwv[11]=32896 (0x8080)
>  smb_bcc=143
>[2016/07/13 05:21:03.494446, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 4E 54 4C 4D 53 53 50 00   01 00 00 00 05 02 08 A0   NTLMSSP. ........
>  [0010] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 4C 00 69 00 6E 00 75   00 78 00 20 00 76 00 65   .L.i.n.u .x. .v.e
>  [0030] 00 72 00 73 00 69 00 6F   00 6E 00 20 00 33 00 2E   .r.s.i.o .n. .3..
>  [0040] 00 31 00 36 00 2E 00 30   00 2D 00 34 00 2D 00 61   .1.6...0 .-.4.-.a
>  [0050] 00 6D 00 64 00 36 00 34   00 00 00 43 00 49 00 46   .m.d.6.4 ...C.I.F
>  [0060] 00 53 00 20 00 56 00 46   00 53 00 20 00 43 00 6C   .S. .V.F .S. .C.l
>  [0070] 00 69 00 65 00 6E 00 74   00 20 00 66 00 6F 00 72   .i.e.n.t . .f.o.r
>  [0080] 00 20 00 4C 00 69 00 6E   00 75 00 78 00 00 00      . .L.i.n .u.x...
>[2016/07/13 05:21:03.494596,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBsesssetupX (pid 18124) conn 0x0
>[2016/07/13 05:21:03.494611,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.494624,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.494637,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.494662,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2016/07/13 05:21:03.494677,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:610(reply_sesssetup_and_X)
>  wct=12 flg2=0xd801
>[2016/07/13 05:21:03.494691,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2016/07/13 05:21:03.494707,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego)
>  NativeOS=[Linux version 3.16.0-4-amd64] NativeLanMan=[CIFS VFS Client for Linux] PrimaryDomain=[]
>[2016/07/13 05:21:03.494727,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 1 for /var/lock/smbXsrv_session_global.tdb
>[2016/07/13 05:21:03.494741, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:/var/lock/smbXsrv_session_global.tdb 2:<none> 3:<none>
>[2016/07/13 05:21:03.494756, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key 76EE6F42
>[2016/07/13 05:21:03.494774, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x812043ea0
>[2016/07/13 05:21:03.494910, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:888(smbXsrv_session_global_store)
>[2016/07/13 05:21:03.494923, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:890(smbXsrv_session_global_store)
>  smbXsrv_session_global_store: key '76EE6F42' stored
>[2016/07/13 05:21:03.494938,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &global_blob: struct smbXsrv_session_globalB
>          version                  : SMBXSRV_VERSION_0 (0)
>          seqnum                   : 0x00000001 (1)
>          info                     : union smbXsrv_session_globalU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_session_global0
>                  db_rec                   : *
>                  session_global_id        : 0x76ee6f42 (1995337538)
>                  session_wire_id          : 0x000000000000f11f (61727)
>                  creation_time            : Wed Jul 13 05:21:03 2016 PDT
>                  expiration_time          : Wed Dec 31 16:00:00 1969 PST
>                  auth_time                : NTTIME(0)
>                  auth_session_info_seqnum : 0x00000000 (0)
>                  auth_session_info        : NULL
>                  connection_dialect       : 0x0000 (0)
>                  signing_required         : 0x00 (0)
>                  encryption_required      : 0x00 (0)
>                  num_channels             : 0x00000001 (1)
>                  channels: ARRAY(1)
>                      channels: struct smbXsrv_channel_global0
>                          server_id: struct server_id
>                              pid                      : 0x00000000000046cc (18124)
>                              task_id                  : 0x00000000 (0)
>                              vnn                      : 0xffffffff (4294967295)
>                              unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                          local_address            : 'ipv4:192.168.1.101:445'
>                          remote_address           : 'ipv4:192.168.1.200:48016'
>                          remote_name              : 'stargate.home.gateway'
>                          auth_session_info_seqnum : 0x00000000 (0)
>                          connection               : *
>[2016/07/13 05:21:03.495149, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key 76EE6F42
>[2016/07/13 05:21:03.495164,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 1 for /var/lock/smbXsrv_session_global.tdb
>[2016/07/13 05:21:03.495177, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:21:03.495191, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1292(smbXsrv_session_create)
>[2016/07/13 05:21:03.495200, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1300(smbXsrv_session_create)
>  smbXsrv_session_create: global_id (0x76ee6f42) stored
>[2016/07/13 05:21:03.495212,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &session_blob: struct smbXsrv_sessionB
>          version                  : SMBXSRV_VERSION_0 (0)
>          reserved                 : 0x00000000 (0)
>          info                     : union smbXsrv_sessionU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_session
>                  table                    : *
>                  db_rec                   : NULL
>                  client                   : *
>                  local_id                 : 0x0000f11f (61727)
>                  global                   : *
>                      global: struct smbXsrv_session_global0
>                          db_rec                   : NULL
>                          session_global_id        : 0x76ee6f42 (1995337538)
>                          session_wire_id          : 0x000000000000f11f (61727)
>                          creation_time            : Wed Jul 13 05:21:03 2016 PDT
>                          expiration_time          : Wed Dec 31 16:00:00 1969 PST
>                          auth_time                : NTTIME(0)
>                          auth_session_info_seqnum : 0x00000000 (0)
>                          auth_session_info        : NULL
>                          connection_dialect       : 0x0000 (0)
>                          signing_required         : 0x00 (0)
>                          encryption_required      : 0x00 (0)
>                          num_channels             : 0x00000001 (1)
>                          channels: ARRAY(1)
>                              channels: struct smbXsrv_channel_global0
>                                  server_id: struct server_id
>                                      pid                      : 0x00000000000046cc (18124)
>                                      task_id                  : 0x00000000 (0)
>                                      vnn                      : 0xffffffff (4294967295)
>                                      unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                                  local_address            : 'ipv4:192.168.1.101:445'
>                                  remote_address           : 'ipv4:192.168.1.200:48016'
>                                  remote_name              : 'stargate.home.gateway'
>                                  auth_session_info_seqnum : 0x00000000 (0)
>                                  connection               : *
>                  status                   : NT_STATUS_MORE_PROCESSING_REQUIRED
>                  idle_time                : Wed Jul 13 05:21:03 2016 PDT
>                  nonce_high_random        : 0x0000000000000000 (0)
>                  nonce_high_max           : 0x0000000000000000 (0)
>                  nonce_high               : 0x0000000000000000 (0)
>                  nonce_low                : 0x0000000000000000 (0)
>                  gensec                   : NULL
>                  compat                   : NULL
>                  tcon_table               : NULL
>                  preauth                  : NULL
>                  encryption_desired       : 0x00 (0)
>[2016/07/13 05:21:03.495528,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:491(make_auth_context_subsystem)
>  Making default auth method list for server role = 'standalone server', encrypt passwords = yes
>[2016/07/13 05:21:03.495544,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match guest
>[2016/07/13 05:21:03.495558,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module)
>  load_auth_module: auth method guest has a valid init
>[2016/07/13 05:21:03.495571,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match sam
>[2016/07/13 05:21:03.495585,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module)
>  load_auth_module: auth method sam has a valid init
>[2016/07/13 05:21:03.495616,  5, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
>  Starting GENSEC mechanism spnego
>[2016/07/13 05:21:03.495633,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.495648,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.495661,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.495675,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.495687,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.495717,  5, pid=18124, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:672(gensec_start_mech)
>  Starting GENSEC submechanism ntlmssp
>[2016/07/13 05:21:03.495742,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa0080205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2016/07/13 05:21:03.495794,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       negotiate: struct NEGOTIATE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmNegotiate (1)
>          NegotiateFlags           : 0xa0080205 (2684879365)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 0: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 0: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 0: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 0: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 0: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 1: NTLMSSP_NEGOTIATE_56     
>          DomainNameLen            : 0x0000 (0)
>          DomainNameMaxLen         : 0x0000 (0)
>          DomainName               : NULL
>          WorkstationLen           : 0x0000 (0)
>          WorkstationMaxLen        : 0x0000 (0)
>          Workstation              : NULL
>[2016/07/13 05:21:03.496030,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       challenge: struct CHALLENGE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmChallenge (0x2)
>          TargetNameLen            : 0x0018 (24)
>          TargetNameMaxLen         : 0x0018 (24)
>          TargetName               : *
>              TargetName               : 'FREENAS-TEST'
>          NegotiateFlags           : 0xa08a0205 (2693399045)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 0: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 0: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 1: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 0: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 1: NTLMSSP_NEGOTIATE_56     
>          ServerChallenge          : c916c6aab1675b3a
>          Reserved                 : 0000000000000000
>          TargetInfoLen            : 0x0072 (114)
>          TargetNameInfoMaxLen     : 0x0072 (114)
>          TargetInfo               : *
>              TargetInfo: struct AV_PAIR_LIST
>                  count                    : 0x00000005 (5)
>                  pair: ARRAY(5)
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvNbDomainName (0x2)
>                          AvLen                    : 0x0018 (24)
>                          Value                    : union ntlmssp_AvValue(case 0x2)
>                          AvNbDomainName           : 'FREENAS-TEST'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvNbComputerName (0x1)
>                          AvLen                    : 0x0018 (24)
>                          Value                    : union ntlmssp_AvValue(case 0x1)
>                          AvNbComputerName         : 'FREENAS-TEST'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvDnsDomainName (0x4)
>                          AvLen                    : 0x000a (10)
>                          Value                    : union ntlmssp_AvValue(case 0x4)
>                          AvDnsDomainName          : 'local'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvDnsComputerName (0x3)
>                          AvLen                    : 0x0024 (36)
>                          Value                    : union ntlmssp_AvValue(case 0x3)
>                          AvDnsComputerName        : 'freenas-test.local'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvEOL (0x0)
>                          AvLen                    : 0x0000 (0)
>                          Value                    : union ntlmssp_AvValue(case 0x0)
>[2016/07/13 05:21:03.496470,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.496498,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.496506,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=310
>  smb_com=0x73
>  smb_rcls=22
>  smb_reh=0
>  smb_err=49152
>  smb_flg=128
>  smb_flg2=51203
>  smb_tid=0
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=106
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  186 (0xBA)
>  smb_bcc=267
>[2016/07/13 05:21:03.496606, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 4E 54 4C 4D 53 53 50 00   02 00 00 00 18 00 18 00   NTLMSSP. ........
>  [0010] 30 00 00 00 05 02 8A A0   C9 16 C6 AA B1 67 5B 3A   0....... .....g[:
>  [0020] 00 00 00 00 00 00 00 00   72 00 72 00 48 00 00 00   ........ r.r.H...
>  [0030] 46 00 52 00 45 00 45 00   4E 00 41 00 53 00 2D 00   F.R.E.E. N.A.S.-.
>  [0040] 54 00 45 00 53 00 54 00   02 00 18 00 46 00 52 00   T.E.S.T. ....F.R.
>  [0050] 45 00 45 00 4E 00 41 00   53 00 2D 00 54 00 45 00   E.E.N.A. S.-.T.E.
>  [0060] 53 00 54 00 01 00 18 00   46 00 52 00 45 00 45 00   S.T..... F.R.E.E.
>  [0070] 4E 00 41 00 53 00 2D 00   54 00 45 00 53 00 54 00   N.A.S.-. T.E.S.T.
>  [0080] 04 00 0A 00 6C 00 6F 00   63 00 61 00 6C 00 03 00   ....l.o. c.a.l...
>  [0090] 24 00 66 00 72 00 65 00   65 00 6E 00 61 00 73 00   $.f.r.e. e.n.a.s.
>  [00A0] 2D 00 74 00 65 00 73 00   74 00 2E 00 6C 00 6F 00   -.t.e.s. t...l.o.
>  [00B0] 63 00 61 00 6C 00 00 00   00 00 00 57 00 69 00 6E   c.a.l... ...W.i.n
>  [00C0] 00 64 00 6F 00 77 00 73   00 20 00 36 00 2E 00 31   .d.o.w.s . .6...1
>  [00D0] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 34   ...S.a.m .b.a. .4
>  [00E0] 00 2E 00 33 00 2E 00 36   00 2D 00 47 00 49 00 54   ...3...6 .-.G.I.T
>  [00F0] 00 2D 00 55 00 4E 00 4B   00 4E 00 4F 00 57 00 4E   .-.U.N.K .N.O.W.N
>  [0100] 00 00 00 4F 00 4E 00 45   00 00 00                  ...O.N.E ...
>[2016/07/13 05:21:03.496998, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 442
>[2016/07/13 05:21:03.497025,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0x1ba
>[2016/07/13 05:21:03.497039,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 2 of length 446 (0 toread)
>[2016/07/13 05:21:03.497053,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.497060,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=442
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=107
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=16468 (0x4054)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  272 (0x110)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=53468 (0xD0DC)
>  smb_vwv[11]=32896 (0x8080)
>  smb_bcc=383
>[2016/07/13 05:21:03.497183, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 4E 54 4C 4D 53 53 50 00   03 00 00 00 00 00 00 00   NTLMSSP. ........
>  [0010] 40 00 00 00 9E 00 9E 00   40 00 00 00 18 00 18 00   @....... @.......
>  [0020] DE 00 00 00 08 00 08 00   F6 00 00 00 00 00 00 00   ........ ........
>  [0030] FE 00 00 00 10 00 10 00   00 01 00 00 05 02 88 A0   ........ ........
>  [0040] 56 24 AD E5 1C DC E0 6F   FA 8D 86 DC EF 59 19 99   V$.....o .....Y..
>  [0050] 01 01 00 00 00 00 00 00   B9 B0 0D 06 01 DD D1 01   ........ ........
>  [0060] C7 4B A7 93 59 38 4E 59   00 00 00 00 02 00 18 00   .K..Y8NY ........
>  [0070] 46 00 52 00 45 00 45 00   4E 00 41 00 53 00 2D 00   F.R.E.E. N.A.S.-.
>  [0080] 54 00 45 00 53 00 54 00   01 00 18 00 46 00 52 00   T.E.S.T. ....F.R.
>  [0090] 45 00 45 00 4E 00 41 00   53 00 2D 00 54 00 45 00   E.E.N.A. S.-.T.E.
>  [00A0] 53 00 54 00 04 00 0A 00   6C 00 6F 00 63 00 61 00   S.T..... l.o.c.a.
>  [00B0] 6C 00 03 00 24 00 66 00   72 00 65 00 65 00 6E 00   l...$.f. r.e.e.n.
>  [00C0] 61 00 73 00 2D 00 74 00   65 00 73 00 74 00 2E 00   a.s.-.t. e.s.t...
>  [00D0] 6C 00 6F 00 63 00 61 00   6C 00 00 00 00 00 46 00   l.o.c.a. l.....F.
>  [00E0] 52 00 45 00 45 00 4E 00   41 00 53 00 2D 00 54 00   R.E.E.N. A.S.-.T.
>  [00F0] 45 00 53 00 54 00 72 00   6F 00 6F 00 74 00 00 00   E.S.T.r. o.o.t...
>  [0100] E0 AA 5A CB A0 5B 78 2E   6E 04 02 B9 43 00 2F 57   ..Z..[x. n...C./W
>  [0110] 00 4C 00 69 00 6E 00 75   00 78 00 20 00 76 00 65   .L.i.n.u .x. .v.e
>  [0120] 00 72 00 73 00 69 00 6F   00 6E 00 20 00 33 00 2E   .r.s.i.o .n. .3..
>  [0130] 00 31 00 36 00 2E 00 30   00 2D 00 34 00 2D 00 61   .1.6...0 .-.4.-.a
>  [0140] 00 6D 00 64 00 36 00 34   00 00 00 43 00 49 00 46   .m.d.6.4 ...C.I.F
>  [0150] 00 53 00 20 00 56 00 46   00 53 00 20 00 43 00 6C   .S. .V.F .S. .C.l
>  [0160] 00 69 00 65 00 6E 00 74   00 20 00 66 00 6F 00 72   .i.e.n.t . .f.o.r
>  [0170] 00 20 00 4C 00 69 00 6E   00 75 00 78 00 00 00      . .L.i.n .u.x...
>[2016/07/13 05:21:03.497545,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBsesssetupX (pid 18124) conn 0x0
>[2016/07/13 05:21:03.497561,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.497574,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.497587,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.497610,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2016/07/13 05:21:03.497624,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:610(reply_sesssetup_and_X)
>  wct=12 flg2=0xd801
>[2016/07/13 05:21:03.497637,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2016/07/13 05:21:03.497651,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego)
>  NativeOS=[Linux version 3.16.0-4-amd64] NativeLanMan=[CIFS VFS Client for Linux] PrimaryDomain=[]
>[2016/07/13 05:21:03.497665,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.497679,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.497691,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.497704,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.497716,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.497769,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       authenticate: struct AUTHENTICATE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmAuthenticate (3)
>          LmChallengeResponseLen   : 0x0000 (0)
>          LmChallengeResponseMaxLen: 0x0000 (0)
>          LmChallengeResponse      : *
>              LmChallengeResponse      : union ntlmssp_LM_RESPONSE(case 0)
>          NtChallengeResponseLen   : 0x009e (158)
>          NtChallengeResponseMaxLen: 0x009e (158)
>          NtChallengeResponse      : *
>              NtChallengeResponse      : union ntlmssp_NTLM_RESPONSE(case 158)
>              v2: struct NTLMv2_RESPONSE
>                  Response                 : 5624ade51cdce06ffa8d86dcef591999
>                  Challenge: struct NTLMv2_CLIENT_CHALLENGE
>                      RespType                 : 0x01 (1)
>                      HiRespType               : 0x01 (1)
>                      Reserved1                : 0x0000 (0)
>                      Reserved2                : 0x00000000 (0)
>                      TimeStamp                : Wed Jul 13 05:21:04 2016 PDT
>                      ChallengeFromClient      : c74ba79359384e59
>                      Reserved3                : 0x00000000 (0)
>                      AvPairs: struct AV_PAIR_LIST
>                          count                    : 0x00000005 (5)
>                          pair: ARRAY(5)
>                              pair: struct AV_PAIR
>                                  AvId                     : MsvAvNbDomainName (0x2)
>                                  AvLen                    : 0x0018 (24)
>                                  Value                    : union ntlmssp_AvValue(case 0x2)
>                                  AvNbDomainName           : 'FREENAS-TEST'
>                              pair: struct AV_PAIR
>                                  AvId                     : MsvAvNbComputerName (0x1)
>                                  AvLen                    : 0x0018 (24)
>                                  Value                    : union ntlmssp_AvValue(case 0x1)
>                                  AvNbComputerName         : 'FREENAS-TEST'
>                              pair: struct AV_PAIR
>                                  AvId                     : MsvAvDnsDomainName (0x4)
>                                  AvLen                    : 0x000a (10)
>                                  Value                    : union ntlmssp_AvValue(case 0x4)
>                                  AvDnsDomainName          : 'local'
>                              pair: struct AV_PAIR
>                                  AvId                     : MsvAvDnsComputerName (0x3)
>                                  AvLen                    : 0x0024 (36)
>                                  Value                    : union ntlmssp_AvValue(case 0x3)
>                                  AvDnsComputerName        : 'freenas-test.local'
>                              pair: struct AV_PAIR
>                                  AvId                     : MsvAvEOL (0x0)
>                                  AvLen                    : 0x0000 (0)
>                                  Value                    : union ntlmssp_AvValue(case 0x0)
>          DomainNameLen            : 0x0018 (24)
>          DomainNameMaxLen         : 0x0018 (24)
>          DomainName               : *
>              DomainName               : 'FREENAS-TEST'
>          UserNameLen              : 0x0008 (8)
>          UserNameMaxLen           : 0x0008 (8)
>          UserName                 : *
>              UserName                 : 'root'
>          WorkstationLen           : 0x0000 (0)
>          WorkstationMaxLen        : 0x0000 (0)
>          Workstation              : *
>              Workstation              : ''
>          EncryptedRandomSessionKeyLen: 0x0010 (16)
>          EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
>          EncryptedRandomSessionKey: *
>              EncryptedRandomSessionKey: DATA_BLOB length=16
>  [0000] E0 AA 5A CB A0 5B 78 2E   6E 04 02 B9 43 00 2F 57   ..Z..[x. n...C./W
>          NegotiateFlags           : 0xa0880205 (2693267973)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 0: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 0: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 0: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 0: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 1: NTLMSSP_NEGOTIATE_56     
>[2016/07/13 05:21:03.498348,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:359(ntlmssp_server_preauth)
>  Got user=[root] domain=[FREENAS-TEST] workstation=[] len1=0 len2=158
>[2016/07/13 05:21:03.498365,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3730(lp_load_ex)
>  lp_load_ex: refreshing parameters
>[2016/07/13 05:21:03.498380,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts)
>  Freeing parametrics:
>[2016/07/13 05:21:03.498446,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:544(init_globals)
>  Initialising global parameters
>[2016/07/13 05:21:03.498540,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2659(lp_do_section)
>  Processing section "[global]"
>  doing parameter server max protocol = SMB3
>  doing parameter interfaces = 127.0.0.1 192.168.1.101
>  doing parameter bind interfaces only = yes
>  doing parameter encrypt passwords = yes
>  doing parameter dns proxy = no
>  doing parameter strict locking = no
>  doing parameter oplocks = yes
>  doing parameter deadtime = 15
>  doing parameter max log size = 51200
>  doing parameter max open files = 235055
>  doing parameter logging = file
>  doing parameter load printers = no
>  doing parameter printing = bsd
>  doing parameter printcap name = /dev/null
>  doing parameter disable spoolss = yes
>  doing parameter getwd cache = yes
>  doing parameter guest account = nobody
>  doing parameter map to guest = Bad User
>  doing parameter obey pam restrictions = yes
>  doing parameter directory name cache size = 0
>  doing parameter kernel change notify = no
>  doing parameter panic action = /usr/local/libexec/samba/samba-backtrace
>  doing parameter nsupdate command = /usr/local/bin/samba-nsupdate -g
>  doing parameter server string = FreeNAS Server
>  doing parameter ea support = yes
>  doing parameter store dos attributes = yes
>  doing parameter lm announce = yes
>  doing parameter hostname lookups = yes
>  doing parameter time server = yes
>  doing parameter acl allow execute always = true
>  doing parameter dos filemode = yes
>  doing parameter multicast dns register = yes
>  doing parameter domain logons = no
>  doing parameter local master = no
>  doing parameter idmap config *: backend = tdb
>  doing parameter idmap config *: range = 90000001-100000000
>  doing parameter server role = standalone
>  doing parameter netbios name = FREENAS-TEST
>  doing parameter workgroup = ONE
>  doing parameter security = user
>  doing parameter pid directory = /var/run/samba
>  doing parameter create mask = 0666
>  doing parameter directory mask = 0777
>  doing parameter client ntlmv2 auth = yes
>  doing parameter dos charset = CP437
>  doing parameter unix charset = UTF-8
>  doing parameter log level = 10
>[2016/07/13 05:21:03.499265,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/debug.c:638(debug_dump_status)
>  INFO: Current debug levels:
>    all: 10
>    tdb: 10
>    printdrivers: 10
>    lanman: 10
>    smb: 10
>    rpc_parse: 10
>    rpc_srv: 10
>    rpc_cli: 10
>    passdb: 10
>    sam: 10
>    auth: 10
>    winbind: 10
>    vfs: 10
>    idmap: 10
>    quota: 10
>    acls: 10
>    locking: 10
>    msdfs: 10
>    dmapi: 10
>    registry: 10
>    scavenger: 10
>    dns: 10
>    ldb: 10
>    tevent: 10
>[2016/07/13 05:21:03.499393,  2, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2676(lp_do_section)
>  Processing section "[Test]"
>[2016/07/13 05:21:03.499409,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1312(free_param_opts)
>  Freeing parametrics:
>  doing parameter path = /mnt/tank/Test
>  doing parameter printable = no
>  doing parameter veto files = /.snapshot/.windows/.mac/.zfs/
>  doing parameter writeable = yes
>  doing parameter browseable = yes
>  doing parameter vfs objects = zfs_space zfsacl aio_pthread streams_xattr
>  doing parameter hide dot files = yes
>  doing parameter guest ok = no
>  doing parameter nfs4:mode = special
>  doing parameter nfs4:acedup = merge
>  doing parameter nfs4:chown = true
>  doing parameter zfsacl:acesort = dontcare
>[2016/07/13 05:21:03.499666,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3771(lp_load_ex)
>  pm_process() returned Yes
>[2016/07/13 05:21:03.499684,  7, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4087(lp_servicenumber)
>  lp_servicenumber: couldn't find homes
>[2016/07/13 05:21:03.499700,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1576(lp_add_ipc)
>  adding IPC service
>[2016/07/13 05:21:03.499717,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:116(make_user_info_map)
>  Mapping user [FREENAS-TEST]\[root] from workstation []
>[2016/07/13 05:21:03.499733,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info)
>  attempting to make a user_info for root (root)
>[2016/07/13 05:21:03.499746,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info)
>  making strings for root's user_info struct
>[2016/07/13 05:21:03.499760,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info)
>  making blobs for root's user_info struct
>[2016/07/13 05:21:03.499773, 10, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info)
>  made a user_info for root (root)
>[2016/07/13 05:21:03.499786,  3, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [FREENAS-TEST]\[root]@[] with the new password interface
>[2016/07/13 05:21:03.499799,  3, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password)
>  check_ntlm_password:  mapped user is: [FREENAS-TEST]\[root]@[]
>[2016/07/13 05:21:03.499812, 10, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password)
>  check_ntlm_password: auth_context challenge created by random
>[2016/07/13 05:21:03.499824, 10, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password)
>  challenge is: 
>[2016/07/13 05:21:03.499836,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] C9 16 C6 AA B1 67 5B 3A                             .....g[: 
>[2016/07/13 05:21:03.499858, 10, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security)
>  Check auth for: [root]
>[2016/07/13 05:21:03.499871, 10, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password)
>  check_ntlm_password: guest had nothing to say
>[2016/07/13 05:21:03.499885, 10, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth)
>  Check auth for: [root]
>[2016/07/13 05:21:03.499898,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1206(is_myname)
>  is_myname("FREENAS-TEST") returns 1
>[2016/07/13 05:21:03.499914,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.499928,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.499941,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.499953,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.499966,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.500006, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username)
>  pdb_set_username: setting username root, was 
>[2016/07/13 05:21:03.500020, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain)
>  pdb_set_domain: setting domain FREENAS-TEST, was 
>[2016/07/13 05:21:03.500033, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:616(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2016/07/13 05:21:03.500047, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname)
>  pdb_set_full_name: setting full name root, was 
>[2016/07/13 05:21:03.500061,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server)
>  Home server: freenas-test
>[2016/07/13 05:21:03.500077, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:732(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\freenas-test\root, was 
>[2016/07/13 05:21:03.500091, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:708(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2016/07/13 05:21:03.500104, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:662(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2016/07/13 05:21:03.500118,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server)
>  Home server: freenas-test
>[2016/07/13 05:21:03.500132, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:685(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\freenas-test\root\profile, was 
>[2016/07/13 05:21:03.500146, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:775(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2016/07/13 05:21:03.500160,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500173,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500186,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500198,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.500210,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.500238, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2016/07/13 05:21:03.500255,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500281, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-1113437308-4027323533-1829826370-1000
>[2016/07/13 05:21:03.500298, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-1113437308-4027323533-1829826370-1000 from rid 1000
>[2016/07/13 05:21:03.500320,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500334,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500346,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500358,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.500370,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.500394, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2016/07/13 05:21:03.500410,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500425,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user root
>[2016/07/13 05:21:03.500437,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is root
>[2016/07/13 05:21:03.500487,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [root]!
>[2016/07/13 05:21:03.500517, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid)
>  gid 0 -> sid S-1-22-2-0
>[2016/07/13 05:21:03.500541,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1645(get_primary_group_sid)
>  Forcing Primary Group to 'Domain Users' for root
>[2016/07/13 05:21:03.500557,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500570,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500583,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500595,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.500607,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.500631, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2016/07/13 05:21:03.500648,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500666, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username)
>  pdb_set_username: setting username root, was 
>[2016/07/13 05:21:03.500680, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain)
>  pdb_set_domain: setting domain FREENAS-TEST, was 
>[2016/07/13 05:21:03.500693, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:616(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2016/07/13 05:21:03.500705, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname)
>  pdb_set_full_name: setting full name root, was 
>[2016/07/13 05:21:03.500719,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server)
>  Home server: freenas-test
>[2016/07/13 05:21:03.500734, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:732(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\freenas-test\root, was 
>[2016/07/13 05:21:03.500747, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:708(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2016/07/13 05:21:03.500760, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:662(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2016/07/13 05:21:03.500773,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server)
>  Home server: freenas-test
>[2016/07/13 05:21:03.500787, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:685(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\freenas-test\root\profile, was 
>[2016/07/13 05:21:03.500800, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:775(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2016/07/13 05:21:03.500814,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500827,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500839,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.500852,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.500864,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.500886, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2016/07/13 05:21:03.500902,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.500916, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-1113437308-4027323533-1829826370-1000
>[2016/07/13 05:21:03.500930, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-1113437308-4027323533-1829826370-1000 from rid 1000
>[2016/07/13 05:21:03.500950, 10, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:557(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-1113437308-4027323533-1829826370-513
>[2016/07/13 05:21:03.500969,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.500985,  4, pid=18124, effective(0, 0), real(0, 0)] ../libcli/auth/ntlm_check.c:359(ntlm_password_check)
>  ntlm_password_check: Checking NTLMv2 password with domain [FREENAS-TEST]
>[2016/07/13 05:21:03.501022,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:183(sam_account_ok)
>  sam_account_ok: Checking SMB password for user root
>[2016/07/13 05:21:03.501043,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:165(logon_hours_ok)
>  logon_hours_ok: user root allowed to logon at this time (Wed Jul 13 12:21:03 2016
>  )
>[2016/07/13 05:21:03.501061,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501075,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.501087,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501100,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.501112,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.501136, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2016/07/13 05:21:03.501153,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.501168,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501186,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.501198,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501210,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.501222,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.501244,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user root
>[2016/07/13 05:21:03.501257,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is root
>[2016/07/13 05:21:03.501271,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [root]!
>[2016/07/13 05:21:03.501286,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.501299,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501311,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.501324,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.501336,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.501358, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get)
>  account_policy_get: name: minimum password age, val: 0
>[2016/07/13 05:21:03.501374,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501387,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.501400,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501412,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2016/07/13 05:21:03.501424,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.501436,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.501458, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2016/07/13 05:21:03.501478,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501493,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user root
>[2016/07/13 05:21:03.501505,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is root
>[2016/07/13 05:21:03.501519,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [root]!
>[2016/07/13 05:21:03.501533, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist)
>  sys_getgrouplist: user [root]
>[2016/07/13 05:21:03.501620, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid)
>  gid 0 -> sid S-1-22-2-0
>[2016/07/13 05:21:03.501638,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/server_info_sam.c:122(make_server_info_sam)
>  make_server_info_sam: made server info for user root -> root
>[2016/07/13 05:21:03.501656,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.501671,  3, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:249(auth_check_ntlm_password)
>  check_ntlm_password: sam authentication for user [root] succeeded
>[2016/07/13 05:21:03.501687,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501700,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.501713,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.501725,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.501737,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.501759,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start)
>  smb_pam_start: PAM: Init user: root
>[2016/07/13 05:21:03.503836,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: 192.168.1.200
>[2016/07/13 05:21:03.503856,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2016/07/13 05:21:03.503870,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: root
>[2016/07/13 05:21:03.503884,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:567(smb_pam_account)
>  smb_pam_account: PAM: Account Management for User: root
>[2016/07/13 05:21:03.504010,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:586(smb_pam_account)
>  smb_pam_account: PAM: Account OK for User: root
>[2016/07/13 05:21:03.504134,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2016/07/13 05:21:03.504155,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.504169,  5, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:292(auth_check_ntlm_password)
>  check_ntlm_password:  PAM Account for user [root] succeeded
>[2016/07/13 05:21:03.504182,  2, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:305(auth_check_ntlm_password)
>  check_ntlm_password:  authentication for user [root] -> [root] -> [root] succeeded
>[2016/07/13 05:21:03.504196, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:215(auth3_check_password)
>  Got NT session key of length 16
>[2016/07/13 05:21:03.504208, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:222(auth3_check_password)
>  Got LM session key of length 8
>[2016/07/13 05:21:03.504222, 10, pid=18124, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:539(ntlmssp_server_postauth)
>  ntlmssp_server_auth: Using unmodified nt session key.
>[2016/07/13 05:21:03.504235,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2016/07/13 05:21:03.504247,  3, pid=18124, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa0080205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2016/07/13 05:21:03.504314,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.504334, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3)
>  Create local NT token for root
>[2016/07/13 05:21:03.504358, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-21-1113437308-4027323533-1829826370-1000]: value=[0:U]
>[2016/07/13 05:21:03.504373, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-21-1113437308-4027323533-1829826370-1000]: id=[0], endptr=[:U]
>[2016/07/13 05:21:03.504386, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1468(sid_to_uid)
>  sid S-1-5-21-1113437308-4027323533-1829826370-1000 -> uid 0
>[2016/07/13 05:21:03.504419, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist)
>  sys_getgrouplist: user [root]
>[2016/07/13 05:21:03.504507, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid)
>  gid 0 -> sid S-1-22-2-0
>[2016/07/13 05:21:03.504537,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.504554,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.504567,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.504580,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.504592,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.504621,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:547(finalize_local_nt_token)
>  Failed to fetch domain sid for ONE
>[2016/07/13 05:21:03.504637,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.504654,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.504668,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.504680,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.504692,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.504704,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.504727,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:579(finalize_local_nt_token)
>  Failed to fetch domain sid for ONE
>[2016/07/13 05:21:03.504743,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.504756,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.504769,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.504782,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.504794,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.504806,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.504859,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.504877,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1113437308-4027323533-1829826370-1000]
>[2016/07/13 05:21:03.504894,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1113437308-4027323533-1829826370-513]
>[2016/07/13 05:21:03.504911,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-2-0]
>[2016/07/13 05:21:03.504927,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set: 0x0
>[2016/07/13 05:21:03.504947,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2016/07/13 05:21:03.504963,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2016/07/13 05:21:03.504980, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-21-1113437308-4027323533-1829826370-1000]: value=[0:U]
>[2016/07/13 05:21:03.504994, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-21-1113437308-4027323533-1829826370-1000]: id=[0], endptr=[:U]
>[2016/07/13 05:21:03.505016, 10, pid=18124, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:323(gencache_set_data_blob)
>  Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-1113437308-4027323533-1829826370-513] and timeout=[Wed Dec 31 16:00:00 1969 PST] (-1468412463 seconds in the past)
>[2016/07/13 05:21:03.506975, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[90000001:G]
>[2016/07/13 05:21:03.506995, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[90000001], endptr=[:G]
>[2016/07/13 05:21:03.507015, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[90000002:G]
>[2016/07/13 05:21:03.507028, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[90000002], endptr=[:G]
>[2016/07/13 05:21:03.507046, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-11]: value=[90000003:G]
>[2016/07/13 05:21:03.507059, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid)
>  Parsing value for key [IDMAP/SID2XID/S-1-5-11]: id=[90000003], endptr=[:G]
>[2016/07/13 05:21:03.514478,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514501,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.514514,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514528,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.514540,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.514572,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2016/07/13 05:21:03.514588,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.514601,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514613,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.514626,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.514638,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.514665,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2016/07/13 05:21:03.514689,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514703,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2016/07/13 05:21:03.514715,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id)
>  SID S-1-5-21-1113437308-4027323533-1829826370-513 belongs to our domain, but there is no corresponding object in the database.
>[2016/07/13 05:21:03.514734,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.514746, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid)
>  LEGACY: mapping failed for sid S-1-5-21-1113437308-4027323533-1829826370-513
>[2016/07/13 05:21:03.514761,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514774,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.514786,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514799,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.514811,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.514832,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2016/07/13 05:21:03.514845,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.514858,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514870,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2016/07/13 05:21:03.514882,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.514894,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.514917,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2016/07/13 05:21:03.514937,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2016/07/13 05:21:03.514951,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2016/07/13 05:21:03.514963,  5, pid=18124, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id)
>  SID S-1-5-21-1113437308-4027323533-1829826370-513 belongs to our domain, but there is no corresponding object in the database.
>[2016/07/13 05:21:03.514980,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.514993, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid)
>  LEGACY: mapping failed for sid S-1-5-21-1113437308-4027323533-1829826370-513
>[2016/07/13 05:21:03.515007, 10, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:594(create_local_token)
>  Could not convert SID S-1-5-21-1113437308-4027323533-1829826370-513 to gid, ignoring it
>[2016/07/13 05:21:03.515026, 10, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
>  Security token SIDs (10):
>    SID[  0]: S-1-5-21-1113437308-4027323533-1829826370-1000
>    SID[  1]: S-1-5-21-1113437308-4027323533-1829826370-513
>    SID[  2]: S-1-22-2-0
>    SID[  3]: S-1-1-0
>    SID[  4]: S-1-5-2
>    SID[  5]: S-1-5-11
>    SID[  6]: S-1-22-1-0
>    SID[  7]: S-1-22-2-90000001
>    SID[  8]: S-1-22-2-90000002
>    SID[  9]: S-1-22-2-90000003
>   Privileges (0x               0):
>   Rights (0x               0):
>[2016/07/13 05:21:03.515110, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 4 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 90000001
>  Group[  2]: 90000002
>  Group[  3]: 90000003
>[2016/07/13 05:21:03.515158,  7, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4087(lp_servicenumber)
>  lp_servicenumber: couldn't find root
>[2016/07/13 05:21:03.515171,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc)
>  Finding user root
>[2016/07/13 05:21:03.515185,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is root
>[2016/07/13 05:21:03.515199,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [root]!
>[2016/07/13 05:21:03.515212,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/password.c:144(register_homes_share)
>  Adding homes service for user 'root' using home directory: '/root'
>[2016/07/13 05:21:03.515227,  7, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4087(lp_servicenumber)
>  lp_servicenumber: couldn't find homes
>[2016/07/13 05:21:03.515248,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:483(smb_pam_start)
>  smb_pam_start: PAM: Init user: root
>[2016/07/13 05:21:03.517170,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:492(smb_pam_start)
>  smb_pam_start: PAM: setting rhost to: stargate.home.gateway
>[2016/07/13 05:21:03.517190,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:501(smb_pam_start)
>  smb_pam_start: PAM: setting tty
>[2016/07/13 05:21:03.517203,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:509(smb_pam_start)
>  smb_pam_start: PAM: Init passed for user: root
>[2016/07/13 05:21:03.517216,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:646(smb_internal_pam_session)
>  smb_internal_pam_session: PAM: tty set to: smb/1995337538
>[2016/07/13 05:21:03.517333,  4, pid=18124, effective(0, 0), real(0, 0), class=auth] ../source3/auth/pampass.c:465(smb_pam_end)
>  smb_pam_end: PAM: PAM_END OK.
>[2016/07/13 05:21:03.517352,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 1 for /var/lock/smbXsrv_session_global.tdb
>[2016/07/13 05:21:03.517365, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:/var/lock/smbXsrv_session_global.tdb 2:<none> 3:<none>
>[2016/07/13 05:21:03.517381, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key 76EE6F42
>[2016/07/13 05:21:03.517397, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x812098760
>[2016/07/13 05:21:03.517442, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:888(smbXsrv_session_global_store)
>[2016/07/13 05:21:03.517451, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:890(smbXsrv_session_global_store)
>  smbXsrv_session_global_store: key '76EE6F42' stored
>[2016/07/13 05:21:03.517466,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &global_blob: struct smbXsrv_session_globalB
>          version                  : SMBXSRV_VERSION_0 (0)
>          seqnum                   : 0x00000002 (2)
>          info                     : union smbXsrv_session_globalU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_session_global0
>                  db_rec                   : *
>                  session_global_id        : 0x76ee6f42 (1995337538)
>                  session_wire_id          : 0x000000000000f11f (61727)
>                  creation_time            : Wed Jul 13 05:21:03 2016 PDT
>                  expiration_time          : Wed Dec 31 16:00:00 1969 PST
>                  auth_time                : Wed Jul 13 05:21:03 2016 PDT
>                  auth_session_info_seqnum : 0x00000001 (1)
>                  auth_session_info        : *
>                      auth_session_info: struct auth_session_info
>                          security_token           : *
>                              security_token: struct security_token
>                                  num_sids                 : 0x0000000a (10)
>                                  sids: ARRAY(10)
>                                      sids                     : S-1-5-21-1113437308-4027323533-1829826370-1000
>                                      sids                     : S-1-5-21-1113437308-4027323533-1829826370-513
>                                      sids                     : S-1-22-2-0
>                                      sids                     : S-1-1-0
>                                      sids                     : S-1-5-2
>                                      sids                     : S-1-5-11
>                                      sids                     : S-1-22-1-0
>                                      sids                     : S-1-22-2-90000001
>                                      sids                     : S-1-22-2-90000002
>                                      sids                     : S-1-22-2-90000003
>                                  privilege_mask           : 0x0000000000000000 (0)
>                                         0: SEC_PRIV_MACHINE_ACCOUNT_BIT
>                                         0: SEC_PRIV_PRINT_OPERATOR_BIT
>                                         0: SEC_PRIV_ADD_USERS_BIT   
>                                         0: SEC_PRIV_DISK_OPERATOR_BIT
>                                         0: SEC_PRIV_REMOTE_SHUTDOWN_BIT
>                                         0: SEC_PRIV_BACKUP_BIT      
>                                         0: SEC_PRIV_RESTORE_BIT     
>                                         0: SEC_PRIV_TAKE_OWNERSHIP_BIT
>                                         0: SEC_PRIV_INCREASE_QUOTA_BIT
>                                         0: SEC_PRIV_SECURITY_BIT    
>                                         0: SEC_PRIV_LOAD_DRIVER_BIT 
>                                         0: SEC_PRIV_SYSTEM_PROFILE_BIT
>                                         0: SEC_PRIV_SYSTEMTIME_BIT  
>                                         0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT
>                                         0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT
>                                         0: SEC_PRIV_CREATE_PAGEFILE_BIT
>                                         0: SEC_PRIV_SHUTDOWN_BIT    
>                                         0: SEC_PRIV_DEBUG_BIT       
>                                         0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT
>                                         0: SEC_PRIV_CHANGE_NOTIFY_BIT
>                                         0: SEC_PRIV_UNDOCK_BIT      
>                                         0: SEC_PRIV_ENABLE_DELEGATION_BIT
>                                         0: SEC_PRIV_MANAGE_VOLUME_BIT
>                                         0: SEC_PRIV_IMPERSONATE_BIT 
>                                         0: SEC_PRIV_CREATE_GLOBAL_BIT
>                                  rights_mask              : 0x00000000 (0)
>                                         0: LSA_POLICY_MODE_INTERACTIVE
>                                         0: LSA_POLICY_MODE_NETWORK  
>                                         0: LSA_POLICY_MODE_BATCH    
>                                         0: LSA_POLICY_MODE_SERVICE  
>                                         0: LSA_POLICY_MODE_PROXY    
>                                         0: LSA_POLICY_MODE_DENY_INTERACTIVE
>                                         0: LSA_POLICY_MODE_DENY_NETWORK
>                                         0: LSA_POLICY_MODE_DENY_BATCH
>                                         0: LSA_POLICY_MODE_DENY_SERVICE
>                                         0: LSA_POLICY_MODE_REMOTE_INTERACTIVE
>                                         0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE
>                                      0x00: LSA_POLICY_MODE_ALL       (0)
>                                      0x00: LSA_POLICY_MODE_ALL_NT4   (0)
>                          unix_token               : *
>                              unix_token: struct security_unix_token
>                                  uid                      : 0x0000000000000000 (0)
>                                  gid                      : 0x0000000000000000 (0)
>                                  ngroups                  : 0x00000004 (4)
>                                  groups: ARRAY(4)
>                                      groups                   : 0x0000000000000000 (0)
>                                      groups                   : 0x00000000055d4a81 (90000001)
>                                      groups                   : 0x00000000055d4a82 (90000002)
>                                      groups                   : 0x00000000055d4a83 (90000003)
>                          info                     : *
>                              info: struct auth_user_info
>                                  account_name             : *
>                                      account_name             : 'root'
>                                  domain_name              : *
>                                      domain_name              : 'FREENAS-TEST'
>                                  full_name                : *
>                                      full_name                : 'root'
>                                  logon_script             : *
>                                      logon_script             : ''
>                                  profile_path             : *
>                                      profile_path             : '\\freenas-test\root\profile'
>                                  home_directory           : *
>                                      home_directory           : '\\freenas-test\root'
>                                  home_drive               : *
>                                      home_drive               : ''
>                                  logon_server             : *
>                                      logon_server             : 'FREENAS-TEST'
>                                  last_logon               : NTTIME(0)
>                                  last_logoff              : Mon Jan 18 19:14:07 2038 PST
>                                  acct_expiry              : Mon Jan 18 19:14:07 2038 PST
>                                  last_password_change     : Wed Jul 13 04:50:18 2016 PDT
>                                  allow_password_change    : Wed Jul 13 04:50:18 2016 PDT
>                                  force_password_change    : Mon Jan 18 19:14:07 2038 PST
>                                  logon_count              : 0x0000 (0)
>                                  bad_password_count       : 0x0000 (0)
>                                  acct_flags               : 0x00000010 (16)
>                                  authenticated            : 0x01 (1)
>                          unix_info                : *
>                              unix_info: struct auth_user_info_unix
>                                  unix_name                : *
>                                      unix_name                : 'root'
>                                  sanitized_username       : *
>                                      sanitized_username       : 'root'
>                          torture                  : NULL
>                          credentials              : NULL
>                  connection_dialect       : 0x0000 (0)
>                  signing_required         : 0x00 (0)
>                  encryption_required      : 0x00 (0)
>                  num_channels             : 0x00000001 (1)
>                  channels: ARRAY(1)
>                      channels: struct smbXsrv_channel_global0
>                          server_id: struct server_id
>                              pid                      : 0x00000000000046cc (18124)
>                              task_id                  : 0x00000000 (0)
>                              vnn                      : 0xffffffff (4294967295)
>                              unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                          local_address            : 'ipv4:192.168.1.101:445'
>                          remote_address           : 'ipv4:192.168.1.200:48016'
>                          remote_name              : 'stargate.home.gateway'
>                          auth_session_info_seqnum : 0x00000001 (1)
>                          connection               : *
>[2016/07/13 05:21:03.518349, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key 76EE6F42
>[2016/07/13 05:21:03.518363,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 1 for /var/lock/smbXsrv_session_global.tdb
>[2016/07/13 05:21:03.518376, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:21:03.518390, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1346(smbXsrv_session_update)
>[2016/07/13 05:21:03.518398, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1354(smbXsrv_session_update)
>  smbXsrv_session_update: global_id (0x76ee6f42) stored
>[2016/07/13 05:21:03.518410,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &session_blob: struct smbXsrv_sessionB
>          version                  : SMBXSRV_VERSION_0 (0)
>          reserved                 : 0x00000000 (0)
>          info                     : union smbXsrv_sessionU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_session
>                  table                    : *
>                  db_rec                   : NULL
>                  client                   : *
>                  local_id                 : 0x0000f11f (61727)
>                  global                   : *
>                      global: struct smbXsrv_session_global0
>                          db_rec                   : NULL
>                          session_global_id        : 0x76ee6f42 (1995337538)
>                          session_wire_id          : 0x000000000000f11f (61727)
>                          creation_time            : Wed Jul 13 05:21:03 2016 PDT
>                          expiration_time          : Wed Dec 31 16:00:00 1969 PST
>                          auth_time                : Wed Jul 13 05:21:03 2016 PDT
>                          auth_session_info_seqnum : 0x00000001 (1)
>                          auth_session_info        : *
>                              auth_session_info: struct auth_session_info
>                                  security_token           : *
>                                      security_token: struct security_token
>                                          num_sids                 : 0x0000000a (10)
>                                          sids: ARRAY(10)
>                                              sids                     : S-1-5-21-1113437308-4027323533-1829826370-1000
>                                              sids                     : S-1-5-21-1113437308-4027323533-1829826370-513
>                                              sids                     : S-1-22-2-0
>                                              sids                     : S-1-1-0
>                                              sids                     : S-1-5-2
>                                              sids                     : S-1-5-11
>                                              sids                     : S-1-22-1-0
>                                              sids                     : S-1-22-2-90000001
>                                              sids                     : S-1-22-2-90000002
>                                              sids                     : S-1-22-2-90000003
>                                          privilege_mask           : 0x0000000000000000 (0)
>                                                 0: SEC_PRIV_MACHINE_ACCOUNT_BIT
>                                                 0: SEC_PRIV_PRINT_OPERATOR_BIT
>                                                 0: SEC_PRIV_ADD_USERS_BIT   
>                                                 0: SEC_PRIV_DISK_OPERATOR_BIT
>                                                 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT
>                                                 0: SEC_PRIV_BACKUP_BIT      
>                                                 0: SEC_PRIV_RESTORE_BIT     
>                                                 0: SEC_PRIV_TAKE_OWNERSHIP_BIT
>                                                 0: SEC_PRIV_INCREASE_QUOTA_BIT
>                                                 0: SEC_PRIV_SECURITY_BIT    
>                                                 0: SEC_PRIV_LOAD_DRIVER_BIT 
>                                                 0: SEC_PRIV_SYSTEM_PROFILE_BIT
>                                                 0: SEC_PRIV_SYSTEMTIME_BIT  
>                                                 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT
>                                                 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT
>                                                 0: SEC_PRIV_CREATE_PAGEFILE_BIT
>                                                 0: SEC_PRIV_SHUTDOWN_BIT    
>                                                 0: SEC_PRIV_DEBUG_BIT       
>                                                 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT
>                                                 0: SEC_PRIV_CHANGE_NOTIFY_BIT
>                                                 0: SEC_PRIV_UNDOCK_BIT      
>                                                 0: SEC_PRIV_ENABLE_DELEGATION_BIT
>                                                 0: SEC_PRIV_MANAGE_VOLUME_BIT
>                                                 0: SEC_PRIV_IMPERSONATE_BIT 
>                                                 0: SEC_PRIV_CREATE_GLOBAL_BIT
>                                          rights_mask              : 0x00000000 (0)
>                                                 0: LSA_POLICY_MODE_INTERACTIVE
>                                                 0: LSA_POLICY_MODE_NETWORK  
>                                                 0: LSA_POLICY_MODE_BATCH    
>                                                 0: LSA_POLICY_MODE_SERVICE  
>                                                 0: LSA_POLICY_MODE_PROXY    
>                                                 0: LSA_POLICY_MODE_DENY_INTERACTIVE
>                                                 0: LSA_POLICY_MODE_DENY_NETWORK
>                                                 0: LSA_POLICY_MODE_DENY_BATCH
>                                                 0: LSA_POLICY_MODE_DENY_SERVICE
>                                                 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE
>                                                 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE
>                                              0x00: LSA_POLICY_MODE_ALL       (0)
>                                              0x00: LSA_POLICY_MODE_ALL_NT4   (0)
>                                  unix_token               : *
>                                      unix_token: struct security_unix_token
>                                          uid                      : 0x0000000000000000 (0)
>                                          gid                      : 0x0000000000000000 (0)
>                                          ngroups                  : 0x00000004 (4)
>                                          groups: ARRAY(4)
>                                              groups                   : 0x0000000000000000 (0)
>                                              groups                   : 0x00000000055d4a81 (90000001)
>                                              groups                   : 0x00000000055d4a82 (90000002)
>                                              groups                   : 0x00000000055d4a83 (90000003)
>                                  info                     : *
>                                      info: struct auth_user_info
>                                          account_name             : *
>                                              account_name             : 'root'
>                                          domain_name              : *
>                                              domain_name              : 'FREENAS-TEST'
>                                          full_name                : *
>                                              full_name                : 'root'
>                                          logon_script             : *
>                                              logon_script             : ''
>                                          profile_path             : *
>                                              profile_path             : '\\freenas-test\root\profile'
>                                          home_directory           : *
>                                              home_directory           : '\\freenas-test\root'
>                                          home_drive               : *
>                                              home_drive               : ''
>                                          logon_server             : *
>                                              logon_server             : 'FREENAS-TEST'
>                                          last_logon               : NTTIME(0)
>                                          last_logoff              : Mon Jan 18 19:14:07 2038 PST
>                                          acct_expiry              : Mon Jan 18 19:14:07 2038 PST
>                                          last_password_change     : Wed Jul 13 04:50:18 2016 PDT
>                                          allow_password_change    : Wed Jul 13 04:50:18 2016 PDT
>                                          force_password_change    : Mon Jan 18 19:14:07 2038 PST
>                                          logon_count              : 0x0000 (0)
>                                          bad_password_count       : 0x0000 (0)
>                                          acct_flags               : 0x00000010 (16)
>                                          authenticated            : 0x01 (1)
>                                  unix_info                : *
>                                      unix_info: struct auth_user_info_unix
>                                          unix_name                : *
>                                              unix_name                : 'root'
>                                          sanitized_username       : *
>                                              sanitized_username       : 'root'
>                                  torture                  : NULL
>                                  credentials              : NULL
>                          connection_dialect       : 0x0000 (0)
>                          signing_required         : 0x00 (0)
>                          encryption_required      : 0x00 (0)
>                          num_channels             : 0x00000001 (1)
>                          channels: ARRAY(1)
>                              channels: struct smbXsrv_channel_global0
>                                  server_id: struct server_id
>                                      pid                      : 0x00000000000046cc (18124)
>                                      task_id                  : 0x00000000 (0)
>                                      vnn                      : 0xffffffff (4294967295)
>                                      unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                                  local_address            : 'ipv4:192.168.1.101:445'
>                                  remote_address           : 'ipv4:192.168.1.200:48016'
>                                  remote_name              : 'stargate.home.gateway'
>                                  auth_session_info_seqnum : 0x00000001 (1)
>                                  connection               : *
>                  status                   : NT_STATUS_OK
>                  idle_time                : Wed Jul 13 05:21:03 2016 PDT
>                  nonce_high_random        : 0x0000000000000000 (0)
>                  nonce_high_max           : 0x0000000000000000 (0)
>                  nonce_high               : 0x0000000000000000 (0)
>                  nonce_low                : 0x0000000000000000 (0)
>                  gensec                   : *
>                  compat                   : *
>                  tcon_table               : NULL
>                  preauth                  : NULL
>                  encryption_desired       : 0x00 (0)
>[2016/07/13 05:21:03.519437,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2214(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/etc/smb4.conf -> /usr/local/etc/smb4.conf  last mod_time: Wed Jul 13 05:20:54 2016
>  
>[2016/07/13 05:21:03.519485,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.519495,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=124
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=128
>  smb_flg2=51203
>  smb_tid=0
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=107
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_bcc=81
>[2016/07/13 05:21:03.519592, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 57 00 69 00 6E 00 64   00 6F 00 77 00 73 00 20   .W.i.n.d .o.w.s. 
>  [0010] 00 36 00 2E 00 31 00 00   00 53 00 61 00 6D 00 62   .6...1.. .S.a.m.b
>  [0020] 00 61 00 20 00 34 00 2E   00 33 00 2E 00 36 00 2D   .a. .4.. .3...6.-
>  [0030] 00 47 00 49 00 54 00 2D   00 55 00 4E 00 4B 00 4E   .G.I.T.- .U.N.K.N
>  [0040] 00 4F 00 57 00 4E 00 00   00 4F 00 4E 00 45 00 00   .O.W.N.. .O.N.E..
>  [0050] 00                                                 . 
>[2016/07/13 05:21:03.519951, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 92
>[2016/07/13 05:21:03.519974,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0x5c
>[2016/07/13 05:21:03.519988,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 3 of length 96 (0 toread)
>[2016/07/13 05:21:03.520001,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.520008,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=92
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=53249
>  smb_tid=0
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=108
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=49
>[2016/07/13 05:21:03.520091, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 5C 00 5C 00 31 00 39   00 32 00 2E 00 31 00 36   .\.\.1.9 .2...1.6
>  [0010] 00 38 00 2E 00 31 00 2E   00 31 00 30 00 31 00 5C   .8...1.. .1.0.1.\
>  [0020] 00 54 00 65 00 73 00 74   00 00 00 3F 3F 3F 3F 3F   .T.e.s.t ...?????
>  [0030] 00                                                 . 
>[2016/07/13 05:21:03.520154,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBtconX (pid 18124) conn 0x0
>[2016/07/13 05:21:03.520170,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.520182,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.520195,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.520218,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2016/07/13 05:21:03.520254,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:861(reply_tcon_and_X)
>  Client requested device type [?????] for share [Test]
>[2016/07/13 05:21:03.520277,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1116(make_connection)
>  making a connection to 'normal' service test
>[2016/07/13 05:21:03.520296,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 1 for /var/lock/smbXsrv_tcon_global.tdb
>[2016/07/13 05:21:03.520309, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:/var/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none>
>[2016/07/13 05:21:03.520323, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key EB80EB8B
>[2016/07/13 05:21:03.520339, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x812043f60
>[2016/07/13 05:21:03.520383, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:678(smbXsrv_tcon_global_store)
>[2016/07/13 05:21:03.520394, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:680(smbXsrv_tcon_global_store)
>  smbXsrv_tcon_global_store: key 'EB80EB8B' stored
>[2016/07/13 05:21:03.520408,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &global_blob: struct smbXsrv_tcon_globalB
>          version                  : SMBXSRV_VERSION_0 (0)
>          seqnum                   : 0x00000001 (1)
>          info                     : union smbXsrv_tcon_globalU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_tcon_global0
>                  db_rec                   : *
>                  tcon_global_id           : 0xeb80eb8b (3951094667)
>                  tcon_wire_id             : 0x00009fea (40938)
>                  server_id: struct server_id
>                      pid                      : 0x00000000000046cc (18124)
>                      task_id                  : 0x00000000 (0)
>                      vnn                      : 0xffffffff (4294967295)
>                      unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                  creation_time            : Wed Jul 13 05:21:04 2016 PDT
>                  share_name               : NULL
>                  encryption_required      : 0x00 (0)
>                  session_global_id        : 0x00000000 (0)
>[2016/07/13 05:21:03.520548, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key EB80EB8B
>[2016/07/13 05:21:03.520562,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 1 for /var/lock/smbXsrv_tcon_global.tdb
>[2016/07/13 05:21:03.520575, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:21:03.520588, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:803(smbXsrv_tcon_create)
>[2016/07/13 05:21:03.520596, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:811(smbXsrv_tcon_create)
>  smbXsrv_tcon_create: global_id (0xeb80eb8b) stored
>[2016/07/13 05:21:03.520608,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &tcon_blob: struct smbXsrv_tconB
>          version                  : SMBXSRV_VERSION_0 (0)
>          reserved                 : 0x00000000 (0)
>          info                     : union smbXsrv_tconU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_tcon
>                  table                    : *
>                  db_rec                   : NULL
>                  local_id                 : 0x00009fea (40938)
>                  global                   : *
>                      global: struct smbXsrv_tcon_global0
>                          db_rec                   : NULL
>                          tcon_global_id           : 0xeb80eb8b (3951094667)
>                          tcon_wire_id             : 0x00009fea (40938)
>                          server_id: struct server_id
>                              pid                      : 0x00000000000046cc (18124)
>                              task_id                  : 0x00000000 (0)
>                              vnn                      : 0xffffffff (4294967295)
>                              unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                          creation_time            : Wed Jul 13 05:21:04 2016 PDT
>                          share_name               : NULL
>                          encryption_required      : 0x00 (0)
>                          session_global_id        : 0x00000000 (0)
>                  status                   : NT_STATUS_INTERNAL_ERROR
>                  idle_time                : Wed Jul 13 05:21:04 2016 PDT
>                  compat                   : NULL
>                  encryption_desired       : 0x00 (0)
>[2016/07/13 05:21:03.520786,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access)
>  Allowed connection from stargate.home.gateway (192.168.1.200)
>[2016/07/13 05:21:03.520805, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token)
>  user_ok_token: share Test is ok for unix user root
>[2016/07/13 05:21:03.520856, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath)
>  set_conn_connectpath: service Test, connectpath = /mnt/tank/Test
>[2016/07/13 05:21:03.520873,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:614(make_connection_snum)
>  Connect path is '/mnt/tank/Test' for service [Test]
>[2016/07/13 05:21:03.520886, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token)
>  user_ok_token: share Test is ok for unix user root
>[2016/07/13 05:21:03.520899, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:284(is_share_read_only_for_token)
>  is_share_read_only_for_user: share Test is read-write for unix user root
>[2016/07/13 05:21:03.520922, 10, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check)
>  se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff
>[2016/07/13 05:21:03.520936,  3, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:113(vfs_init_default)
>  Initialising default vfs hooks
>[2016/07/13 05:21:03.520951, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for posixacl
>[2016/07/13 05:21:03.520964,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs)
>  Successfully added vfs backend 'posixacl'
>[2016/07/13 05:21:03.520977, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>[2016/07/13 05:21:03.520989,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs)
>  Successfully added vfs backend '/[Default VFS]/'
>[2016/07/13 05:21:03.521001,  3, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2016/07/13 05:21:03.521014, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
>[2016/07/13 05:21:03.521031,  3, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom)
>  Initialising custom vfs hooks from [streams_xattr]
>[2016/07/13 05:21:03.521044, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for streams_xattr
>[2016/07/13 05:21:03.521057,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:179(vfs_init_custom)
>  vfs module [streams_xattr] not loaded - trying to load...
>[2016/07/13 05:21:03.521070,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:171(do_smb_load_module)
>  Loading module 'streams_xattr'
>[2016/07/13 05:21:03.521083,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:185(do_smb_load_module)
>  Loading module 'streams_xattr': Trying to load from /usr/local/lib/shared-modules/vfs/streams_xattr.so
>[2016/07/13 05:21:03.521224,  2, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:196(do_smb_load_module)
>  Module 'streams_xattr' loaded
>[2016/07/13 05:21:03.521240, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for streams_xattr
>[2016/07/13 05:21:03.521253,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs)
>  Successfully added vfs backend 'streams_xattr'
>[2016/07/13 05:21:03.521266, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for streams_xattr
>  Successfully loaded vfs module [streams_xattr] with the new modules system
>[2016/07/13 05:21:03.521284,  3, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom)
>  Initialising custom vfs hooks from [aio_pthread]
>[2016/07/13 05:21:03.521297, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for aio_pthread
>[2016/07/13 05:21:03.521309,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:179(vfs_init_custom)
>  vfs module [aio_pthread] not loaded - trying to load...
>[2016/07/13 05:21:03.521321,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:171(do_smb_load_module)
>  Loading module 'aio_pthread'
>[2016/07/13 05:21:03.521334,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:185(do_smb_load_module)
>  Loading module 'aio_pthread': Trying to load from /usr/local/lib/shared-modules/vfs/aio_pthread.so
>[2016/07/13 05:21:03.521419,  2, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:196(do_smb_load_module)
>  Module 'aio_pthread' loaded
>[2016/07/13 05:21:03.521436, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for aio_pthread
>[2016/07/13 05:21:03.521449,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs)
>  Successfully added vfs backend 'aio_pthread'
>[2016/07/13 05:21:03.521462, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for aio_pthread
>  Successfully loaded vfs module [aio_pthread] with the new modules system
>[2016/07/13 05:21:03.521484,  3, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom)
>  Initialising custom vfs hooks from [zfsacl]
>[2016/07/13 05:21:03.521498, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for zfsacl
>[2016/07/13 05:21:03.521510,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:179(vfs_init_custom)
>  vfs module [zfsacl] not loaded - trying to load...
>[2016/07/13 05:21:03.521522,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:171(do_smb_load_module)
>  Loading module 'zfsacl'
>[2016/07/13 05:21:03.521535,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:185(do_smb_load_module)
>  Loading module 'zfsacl': Trying to load from /usr/local/lib/shared-modules/vfs/zfsacl.so
>[2016/07/13 05:21:03.521788,  2, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:196(do_smb_load_module)
>  Module 'zfsacl' loaded
>[2016/07/13 05:21:03.521806, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for zfsacl
>[2016/07/13 05:21:03.521819,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs)
>  Successfully added vfs backend 'zfsacl'
>[2016/07/13 05:21:03.521832, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for zfsacl
>  Successfully loaded vfs module [zfsacl] with the new modules system
>[2016/07/13 05:21:03.521850,  3, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom)
>  Initialising custom vfs hooks from [zfs_space]
>[2016/07/13 05:21:03.521863, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for zfs_space
>[2016/07/13 05:21:03.521875,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:179(vfs_init_custom)
>  vfs module [zfs_space] not loaded - trying to load...
>[2016/07/13 05:21:03.521887,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:171(do_smb_load_module)
>  Loading module 'zfs_space'
>[2016/07/13 05:21:03.521900,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:185(do_smb_load_module)
>  Loading module 'zfs_space': Trying to load from /usr/local/lib/shared-modules/vfs/zfs_space.so
>[2016/07/13 05:21:03.527976,  2, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/modules.c:196(do_smb_load_module)
>  Module 'zfs_space' loaded
>[2016/07/13 05:21:03.527996, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for zfs_space
>[2016/07/13 05:21:03.528010,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs)
>  Successfully added vfs backend 'zfs_space'
>[2016/07/13 05:21:03.528023, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry)
>  vfs_find_backend_entry called for zfs_space
>  Successfully loaded vfs module [zfs_space] with the new modules system
>[2016/07/13 05:21:03.528046, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_streams_xattr.c:919(streams_xattr_connect)
>  streams_xattr using stream prefix: user.DosStream.
>[2016/07/13 05:21:03.528077,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 784 - private_data=0x8120b43e0
>[2016/07/13 05:21:03.528093,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:446(messaging_register)
>  Registering messaging pointer for type 793 - private_data=0x81209f660
>[2016/07/13 05:21:03.528157, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath)
>  set_conn_connectpath: service Test, connectpath = /mnt/tank/Test
>[2016/07/13 05:21:03.528174, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token)
>  user_ok_token: share Test is ok for unix user root
>[2016/07/13 05:21:03.528188, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:284(is_share_read_only_for_token)
>  is_share_read_only_for_user: share Test is read-write for unix user root
>[2016/07/13 05:21:03.528206, 10, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check)
>  se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff
>[2016/07/13 05:21:03.528250,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.528270,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
>  Security token SIDs (10):
>    SID[  0]: S-1-5-21-1113437308-4027323533-1829826370-1000
>    SID[  1]: S-1-5-21-1113437308-4027323533-1829826370-513
>    SID[  2]: S-1-22-2-0
>    SID[  3]: S-1-1-0
>    SID[  4]: S-1-5-2
>    SID[  5]: S-1-5-11
>    SID[  6]: S-1-22-1-0
>    SID[  7]: S-1-22-2-90000001
>    SID[  8]: S-1-22-2-90000002
>    SID[  9]: S-1-22-2-90000003
>   Privileges (0x               0):
>   Rights (0x               0):
>[2016/07/13 05:21:03.528389,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 4 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 90000001
>  Group[  2]: 90000002
>  Group[  3]: 90000003
>[2016/07/13 05:21:03.528431,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal)
>  Impersonated user: uid=(0,0), gid=(0,0)
>[2016/07/13 05:21:03.528447,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.528459,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>  Security token: (NULL)
>[2016/07/13 05:21:03.528471,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2016/07/13 05:21:03.528497,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2016/07/13 05:21:03.528521, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:164(set_conn_connectpath)
>  set_conn_connectpath: service Test, connectpath = /mnt/tank/Test
>[2016/07/13 05:21:03.528556, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_default.c:166(vfswrap_fs_capabilities)
>  vfswrap_fs_capabilities: timestamp resolution of sec available on share Test, directory /mnt/tank/Test
>[2016/07/13 05:21:03.528572,  2, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:864(make_connection_snum)
>   (ipv4:192.168.1.200:48016) connect to service Test initially as user root (uid=0, gid=0) (pid 18124)
>[2016/07/13 05:21:03.528593,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order)
>  check lock order 1 for /var/lock/smbXsrv_tcon_global.tdb
>[2016/07/13 05:21:03.528606, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:/var/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none>
>[2016/07/13 05:21:03.528620, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Locking key EB80EB8B
>[2016/07/13 05:21:03.528635, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal)
>  Allocated locked data 0x0x81208b960
>[2016/07/13 05:21:03.528653, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:678(smbXsrv_tcon_global_store)
>[2016/07/13 05:21:03.528661, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:680(smbXsrv_tcon_global_store)
>  smbXsrv_tcon_global_store: key 'EB80EB8B' stored
>[2016/07/13 05:21:03.528674,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &global_blob: struct smbXsrv_tcon_globalB
>          version                  : SMBXSRV_VERSION_0 (0)
>          seqnum                   : 0x00000002 (2)
>          info                     : union smbXsrv_tcon_globalU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_tcon_global0
>                  db_rec                   : *
>                  tcon_global_id           : 0xeb80eb8b (3951094667)
>                  tcon_wire_id             : 0x00009fea (40938)
>                  server_id: struct server_id
>                      pid                      : 0x00000000000046cc (18124)
>                      task_id                  : 0x00000000 (0)
>                      vnn                      : 0xffffffff (4294967295)
>                      unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                  creation_time            : Wed Jul 13 05:21:04 2016 PDT
>                  share_name               : 'Test'
>                  encryption_required      : 0x00 (0)
>                  session_global_id        : 0x76ee6f42 (1995337538)
>[2016/07/13 05:21:03.528790, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key)
>  Unlocking key EB80EB8B
>[2016/07/13 05:21:03.528803,  5, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor)
>  release lock order 1 for /var/lock/smbXsrv_tcon_global.tdb
>[2016/07/13 05:21:03.528816, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
>  lock order:  1:<none> 2:<none> 3:<none>
>[2016/07/13 05:21:03.528829, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:856(smbXsrv_tcon_update)
>[2016/07/13 05:21:03.528837, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:864(smbXsrv_tcon_update)
>  smbXsrv_tcon_update: global_id (0xeb80eb8b) stored
>[2016/07/13 05:21:03.528848,  1, pid=18124, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug)
>       &tcon_blob: struct smbXsrv_tconB
>          version                  : SMBXSRV_VERSION_0 (0)
>          reserved                 : 0x00000000 (0)
>          info                     : union smbXsrv_tconU(case 0)
>          info0                    : *
>              info0: struct smbXsrv_tcon
>                  table                    : *
>                  db_rec                   : NULL
>                  local_id                 : 0x00009fea (40938)
>                  global                   : *
>                      global: struct smbXsrv_tcon_global0
>                          db_rec                   : NULL
>                          tcon_global_id           : 0xeb80eb8b (3951094667)
>                          tcon_wire_id             : 0x00009fea (40938)
>                          server_id: struct server_id
>                              pid                      : 0x00000000000046cc (18124)
>                              task_id                  : 0x00000000 (0)
>                              vnn                      : 0xffffffff (4294967295)
>                              unique_id                : 0x43fd96d0a3160955 (4899237792482462037)
>                          creation_time            : Wed Jul 13 05:21:04 2016 PDT
>                          share_name               : 'Test'
>                          encryption_required      : 0x00 (0)
>                          session_global_id        : 0x76ee6f42 (1995337538)
>                  status                   : NT_STATUS_OK
>                  idle_time                : Wed Jul 13 05:21:04 2016 PDT
>                  compat                   : *
>                  encryption_desired       : 0x00 (0)
>[2016/07/13 05:21:03.529018,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:1028(reply_tcon_and_X)
>  tconX service=Test 
>[2016/07/13 05:21:03.529031,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.529039,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=62
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=128
>  smb_flg2=51203
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=108
>  smt_wct=7
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_vwv[ 3]=  511 (0x1FF)
>  smb_vwv[ 4]=   31 (0x1F)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_bcc=13
>[2016/07/13 05:21:03.529134, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 41 3A 00 4E 00 54 00 46   00 53 00 00 00            A:.N.T.F .S...
>[2016/07/13 05:21:03.529318, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 68
>[2016/07/13 05:21:03.529337,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0x44
>[2016/07/13 05:21:03.529350,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 4 of length 72 (0 toread)
>[2016/07/13 05:21:03.529363,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.529372,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=49153
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=109
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=  100 (0x64)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   66 (0x42)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=3
>[2016/07/13 05:21:03.529512, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 00 02                                           ... 
>[2016/07/13 05:21:03.529534,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBtrans2 (pid 18124) conn 0x81209fae0
>[2016/07/13 05:21:03.529549,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2016/07/13 05:21:03.529563,  5, pid=18124, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug)
>  Security token SIDs (10):
>    SID[  0]: S-1-5-21-1113437308-4027323533-1829826370-1000
>    SID[  1]: S-1-5-21-1113437308-4027323533-1829826370-513
>    SID[  2]: S-1-22-2-0
>    SID[  3]: S-1-1-0
>    SID[  4]: S-1-5-2
>    SID[  5]: S-1-5-11
>    SID[  6]: S-1-22-1-0
>    SID[  7]: S-1-22-2-90000001
>    SID[  8]: S-1-22-2-90000002
>    SID[  9]: S-1-22-2-90000003
>   Privileges (0x               0):
>   Rights (0x               0):
>[2016/07/13 05:21:03.529643,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 4 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 90000001
>  Group[  2]: 90000002
>  Group[  3]: 90000003
>[2016/07/13 05:21:03.529685,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal)
>  Impersonated user: uid=(0,0), gid=(0,0)
>[2016/07/13 05:21:03.529717,  4, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:844(vfs_ChDir)
>  vfs_ChDir to /mnt/tank/Test
>[2016/07/13 05:21:03.529779,  4, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:855(vfs_ChDir)
>  vfs_ChDir got /mnt/tank/Test
>[2016/07/13 05:21:03.529796,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:3907(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 512
>[2016/07/13 05:21:03.529812,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:3289(smbd_do_qfsinfo)
>  smbd_do_qfsinfo: level = 512
>[2016/07/13 05:21:03.529834,  9, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1050(send_trans2_replies)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 12, useable_space = 16408
>[2016/07/13 05:21:03.529849,  9, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1052(send_trans2_replies)
>  t2_rep: params_to_send = 0, data_to_send = 12, paramsize = 0, datasize = 12
>[2016/07/13 05:21:03.529861,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.529869,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=128
>  smb_flg2=51203
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=109
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   12 (0xC)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   12 (0xC)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2016/07/13 05:21:03.529981, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 01 00 00 00 7B 01 00   00 00 00 00 00            .....{.. .....
>[2016/07/13 05:21:03.530013,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:3925(call_trans2qfsinfo)
>  SMBtrans2 info_level = 512
>[2016/07/13 05:21:03.530070, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 82
>[2016/07/13 05:21:03.530088,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0x52
>[2016/07/13 05:21:03.530101,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 5 of length 86 (0 toread)
>[2016/07/13 05:21:03.530114,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.530121,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=82
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=49153
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=110
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=   12 (0xC)
>  smb_vwv[ 2]=    4 (0x4)
>  smb_vwv[ 3]=  100 (0x64)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   66 (0x42)
>  smb_vwv[11]=   12 (0xC)
>  smb_vwv[12]=   70 (0x46)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    4 (0x4)
>  smb_bcc=17
>[2016/07/13 05:21:03.530256, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 00 00 00 02 01 00 00   00 5B 01 00 00 00 00 00   ........ .[......
>  [0010] 00                                                 . 
>[2016/07/13 05:21:03.530290,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBtrans2 (pid 18124) conn 0x81209fae0
>[2016/07/13 05:21:03.530304,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user)
>  Skipping user change - already user
>[2016/07/13 05:21:03.530318, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:3946(call_trans2setfsinfo)
>  call_trans2setfsinfo: for service [Test]
>[2016/07/13 05:21:03.530333, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:4012(call_trans2setfsinfo)
>  call_trans2setfsinfo: set unix_info info. major = 1, minor = 0 cap_low = 0x15b, cap_high = 0x0nsize=55
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=128
>  smb_flg2=51203
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=110
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=0
>[2016/07/13 05:21:03.530450, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>[2016/07/13 05:21:03.530515, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 98
>[2016/07/13 05:21:03.530533,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0x62
>[2016/07/13 05:21:03.530559,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 6 of length 102 (0 toread)
>[2016/07/13 05:21:03.530571,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.530579,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=98
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=49153
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=111
>  smt_wct=15
>  smb_vwv[ 0]=   32 (0x20)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]= 4000 (0xFA0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   32 (0x20)
>  smb_vwv[10]=   66 (0x42)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=33
>[2016/07/13 05:21:03.530715, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 00 02 00 00 00 00 2F   00 6F 00 70 00 65 00 6E   ......./ .o.p.e.n
>  [0010] 00 76 00 70 00 6E 00 2E   00 7A 00 69 00 70 00 00   .v.p.n.. .z.i.p..
>  [0020] 00                                                 . 
>[2016/07/13 05:21:03.530763,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBtrans2 (pid 18124) conn 0x81209fae0
>[2016/07/13 05:21:03.530777,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user)
>  Skipping user change - already user
>[2016/07/13 05:21:03.530791,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:5595(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512
>[2016/07/13 05:21:03.530809,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:257(unix_convert)
>  unix_convert called on file "openvpn.zip"
>[2016/07/13 05:21:03.530822,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:449(unix_convert)
>  unix_convert begin: name = openvpn.zip, dirpath = , start = openvpn.zip
>[2016/07/13 05:21:03.530845,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:472(unix_convert)
>  conversion of base_name finished openvpn.zip -> openvpn.zip
>[2016/07/13 05:21:03.530860,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:999(is_in_path)
>  is_in_path: openvpn.zip
>[2016/07/13 05:21:03.530873,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1023(is_in_path)
>  is_in_path: match not found
>[2016/07/13 05:21:03.530885, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1160(check_reduced_name)
>  check_reduced_name [openvpn.zip] [/mnt/tank/Test]
>[2016/07/13 05:21:03.530908, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1220(check_reduced_name)
>  check_reduced_name realpath [openvpn.zip] -> [/mnt/tank/Test/openvpn.zip]
>[2016/07/13 05:21:03.530923,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1307(check_reduced_name)
>  openvpn.zip reduced to /mnt/tank/Test/openvpn.zip
>[2016/07/13 05:21:03.530940, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/files.c:745(file_name_hash)
>  file_name_hash: /mnt/tank/Test/openvpn.zip hash 0xfb9ea73e
>[2016/07/13 05:21:03.530960,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:5738(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo openvpn.zip (fnum [fsp is NULL]) level=512 call=5 total_data=0
>[2016/07/13 05:21:03.530975,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:4666(smbd_do_qfilepathinfo)
>  smbd_do_qfilepathinfo: openvpn.zip (fnum [fsp is NULL]) level=512 max_data=4000
>[2016/07/13 05:21:03.530989,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:583(dos_mode)
>  dos_mode: openvpn.zip
>[2016/07/13 05:21:03.531040, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:303(get_ea_dos_attribute)
>  get_ea_dos_attribute: openvpn.zip attr = 0x20
>[2016/07/13 05:21:03.531056, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:345(get_ea_dos_attribute)
>  get_ea_dos_attribute: file openvpn.zip case 3 set btime Wed Jul 13 04:51:59 2016
>  
>[2016/07/13 05:21:03.531076,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:361(get_ea_dos_attribute)
>  get_ea_dos_attribute returning (0x20)a
>[2016/07/13 05:21:03.531090,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:36(dos_mode_debug_print)
>  dos_mode returning a
>[2016/07/13 05:21:03.531108, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:4306(store_file_unix_basic)
>  store_file_unix_basic: SMB_QUERY_FILE_UNIX_BASIC
>[2016/07/13 05:21:03.531121,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:4307(store_file_unix_basic)
>  store_file_unix_basic: st_mode=100775
>[2016/07/13 05:21:03.531135,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:5227(smbd_do_qfilepathinfo)
>  smbd_do_qfilepathinfo: SMB_QUERY_FILE_UNIX_BASIC
>[2016/07/13 05:21:03.531148,  4, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] B8 32 00 00 00 00 00 00   00 20 00 00 00 00 00 00   .2...... . ......
>  [0010] EB A5 05 F6 FC DC D1 01   B3 16 02 F6 FC DC D1 01   ........ ........
>  [0020] 8A C0 98 34 7B D7 D1 01   00 00 00 00 00 00 00 00   ...4{... ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 B9 00 00 00   ........ ........
>  [0040] 00 00 00 00 69 00 2B 5C   00 00 00 00 09 00 00 00   ....i.+\ ........
>  [0050] 00 00 00 00 FD 01 00 00   00 00 00 00 01 00 00 00   ........ ........
>  [0060] 00 00 00 00                                        .... 
>[2016/07/13 05:21:03.531253,  9, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1050(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 100, useable_space = 16406
>[2016/07/13 05:21:03.531266,  9, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1052(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 100, paramsize = 2, datasize = 100
>[2016/07/13 05:21:03.531279,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.531286,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=160
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=128
>  smb_flg2=51203
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=111
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=  100 (0x64)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  100 (0x64)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=105
>[2016/07/13 05:21:03.531409, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 00 00 00 00 B8 32 00   00 00 00 00 00 00 20 00   ......2. ...... .
>  [0010] 00 00 00 00 00 EB A5 05   F6 FC DC D1 01 B3 16 02   ........ ........
>  [0020] F6 FC DC D1 01 8A C0 98   34 7B D7 D1 01 00 00 00   ........ 4{......
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 B9 00 00 00 00 00 00   00 69 00 2B 5C 00 00 00   ........ .i.+\...
>  [0050] 00 09 00 00 00 00 00 00   00 FD 01 00 00 00 00 00   ........ ........
>  [0060] 00 01 00 00 00 00 00 00   00                        ........ .
>[2016/07/13 05:21:03.531605, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
>  got smb length of 102
>[2016/07/13 05:21:03.531624,  6, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1878(process_smb)
>  got message type 0x0 of len 0x66
>[2016/07/13 05:21:03.531637,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1880(process_smb)
>  Transaction 7 of length 106 (0 toread)
>[2016/07/13 05:21:03.531650,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:169(show_msg)
>[2016/07/13 05:21:03.531658,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:179(show_msg)
>  size=102
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=49153
>  smb_tid=40938
>  smb_pid=1339
>  smb_uid=61727
>  smb_mid=112
>  smt_wct=15
>  smb_vwv[ 0]=   32 (0x20)
>  smb_vwv[ 1]=    2 (0x2)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   32 (0x20)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    2 (0x2)
>  smb_vwv[12]=  100 (0x64)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    6 (0x6)
>  smb_bcc=37
>[2016/07/13 05:21:03.531792, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 00 00 00 0A 02 00 00 00   00 2F 00 6F 00 70 00 65   ........ ./.o.p.e
>  [0010] 00 6E 00 76 00 70 00 6E   00 2E 00 7A 00 69 00 70   .n.v.p.n ...z.i.p
>  [0020] 00 00 00 00 00                                     ..... 
>[2016/07/13 05:21:03.531842,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1490(switch_message)
>  switch message SMBtrans2 (pid 18124) conn 0x81209fae0
>[2016/07/13 05:21:03.531856,  4, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user)
>  Skipping user change - already user
>[2016/07/13 05:21:03.531872,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:257(unix_convert)
>  unix_convert called on file "openvpn.zip"
>[2016/07/13 05:21:03.531885,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:449(unix_convert)
>  unix_convert begin: name = openvpn.zip, dirpath = , start = openvpn.zip
>[2016/07/13 05:21:03.531902,  5, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:472(unix_convert)
>  conversion of base_name finished openvpn.zip -> openvpn.zip
>[2016/07/13 05:21:03.531915,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:999(is_in_path)
>  is_in_path: openvpn.zip
>[2016/07/13 05:21:03.531928,  8, pid=18124, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1023(is_in_path)
>  is_in_path: match not found
>[2016/07/13 05:21:03.531940, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1160(check_reduced_name)
>  check_reduced_name [openvpn.zip] [/mnt/tank/Test]
>[2016/07/13 05:21:03.531960, 10, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1220(check_reduced_name)
>  check_reduced_name realpath [openvpn.zip] -> [/mnt/tank/Test/openvpn.zip]
>[2016/07/13 05:21:03.531974,  5, pid=18124, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1307(check_reduced_name)
>  openvpn.zip reduced to /mnt/tank/Test/openvpn.zip
>[2016/07/13 05:21:03.531989,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:8534(call_trans2setfilepathinfo)
>  call_trans2setfilepathinfo(6) openvpn.zip (fnum [fsp is NULL]) info_level=522 totdata=2
>[2016/07/13 05:21:03.532004,  3, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:8111(smbd_do_setfilepathinfo)
>  smbd_do_setfilepathinfo: openvpn.zip (fnum [fsp is NULL]) info_level=522 totdata=2
>[2016/07/13 05:21:03.532018, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:7998(smb_posix_unlink)
>  smb_posix_unlink: file openvpn.zip
>[2016/07/13 05:21:03.532032, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x10001ff, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip
>[2016/07/13 05:21:03.532047, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x10001ff, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip
>[2016/07/13 05:21:03.532116, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.532162, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.532176, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.532216, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.532231, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532245, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532260, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532307, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.532336, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.532350, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.532389, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.532403, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532417, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532431, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532478, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.532509, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.532523, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.532562, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.532576, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532590, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532604, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532647, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.532693, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.532706, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.532759, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.532773, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532787, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532801, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532844, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.532872, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.532886, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.532925, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.532939, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532952, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.532966, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533023, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.533052, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.533078, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.533116, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.533130, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533143, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533158, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533213, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.533241, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.533254, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.533305, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.533319, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533332, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533348, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533391, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.533419, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.533432, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.533471, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.533490, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533503, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533517, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533560, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.533615, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.533628, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.533666, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.533683, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533697, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533711, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533770, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.533798, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.533811, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.533862, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.533876, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533889, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533903, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.533945, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.533973, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.533986, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.534024, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.534038, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534051, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534068, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534124, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.534152, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.534166, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.534217, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.534231, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534244, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534258, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534327, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.534357, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.534383, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.534422, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.534436, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534449, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534466, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534514, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.534542, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.534556, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.534594, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.534611, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534624, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534638, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534694, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.534724, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.534751, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.534790, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.534803, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534816, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534831, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.534874, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.534915, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.534928, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.534981, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.534995, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535008, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535022, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535079, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.535107, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.535120, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.535172, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.535186, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535198, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535212, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535255, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.535283, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.535296, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.535334, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.535348, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535361, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535378, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535421, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.535449, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.535462, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.535506, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.535522, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535536, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535550, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535619, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.535648, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.535661, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.535699, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.535713, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535729, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535744, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535786, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.535814, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.535827, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.535866, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.535880, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535893, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535907, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.535948, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.535978, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.535992, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.536030, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.536044, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536057, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536071, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536113, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.536142, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.536155, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.536194, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.536208, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536221, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536235, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536306, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.536335, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.536361, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.536399, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.536413, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536426, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536441, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536487, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.536516, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.536529, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.536568, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.536583, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536597, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536613, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536669, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.536697, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.536723, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.536763, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.536777, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536790, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536807, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536850, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.536905, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.536918, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.536957, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.536971, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.536984, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537001, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537044, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.537098, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.537111, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.537150, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.537163, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537176, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537191, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537233, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.537263, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.537277, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.537327, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.537341, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537355, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537369, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537417, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.537445, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.537459, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.537505, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.537521, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537534, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537548, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537592, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.537620, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.537634, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.537672, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.537686, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537699, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537713, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537755, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.537797, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.537810, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.537866, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.537880, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537893, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537907, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.537950, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.537978, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.537991, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.538034, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.538048, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538061, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538076, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538120, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.538148, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.538161, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.538200, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.538214, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538227, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538241, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538283, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.538311, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.538325, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.538364, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.538380, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538393, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538407, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538451, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.538483, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.538497, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.538537, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.538551, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538564, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538578, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538647, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.538676, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.538689, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.538727, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.538741, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538754, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538768, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538813, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.538842, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.538855, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.538893, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.538908, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538921, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538935, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.538981, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.539009, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.539023, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.539063, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.539078, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539092, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539107, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539149, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.539177, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.539190, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.539229, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.539243, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539256, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539271, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539313, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.539341, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.539354, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.539395, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.539411, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539424, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539439, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539485, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.539514, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.539527, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.539566, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.539580, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539593, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539608, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539652, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.539681, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.539695, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.539733, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.539747, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539761, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539775, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539817, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.539845, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.539858, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.539897, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.539911, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539924, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539940, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.539983, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.540011, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.540024, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.540062, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.540076, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540089, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540104, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540177, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.540205, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.540218, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.540257, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.540272, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540285, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540299, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540364, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.540394, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.540420, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.540460, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.540480, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540494, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540508, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540555, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.540584, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.540597, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.540638, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.540653, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540666, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540681, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540750, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.540792, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.540805, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.540844, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.540871, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540885, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540899, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.540944, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.540972, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.540985, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.541024, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.541040, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541054, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541068, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541110, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.541138, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.541152, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.541190, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.541204, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541217, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541235, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541278, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.541307, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.541320, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.541361, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.541376, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541389, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541403, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541446, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.541478, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.541492, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.541533, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.541548, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541561, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541575, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541617, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.541646, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.541659, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.541698, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.541712, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541725, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541740, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541782, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.541812, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.541825, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.541864, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.541878, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541891, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541906, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.541949, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.541977, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.541990, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.542030, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.542045, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542059, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542073, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542117, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.542158, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.542172, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.542224, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.542237, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542250, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542268, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542311, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.542352, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.542365, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.542417, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.542431, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542444, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542462, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542509, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.542537, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.542551, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.542589, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.542604, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542617, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542631, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542673, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.542701, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.542714, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.542754, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.542768, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542781, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542796, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542838, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.542866, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.542879, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.542917, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.542934, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542947, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.542961, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543004, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.543034, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.543047, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.543086, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.543100, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543113, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543127, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543169, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.543198, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.543211, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.543252, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.543267, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543279, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543294, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543338, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.543378, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.543392, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.543432, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.543446, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543459, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543474, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543537, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.543595, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.543609, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.543649, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.543677, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543690, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543704, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543765, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.543794, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.543820, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.543861, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.543875, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543888, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543903, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.543961, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.543990, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.544003, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.544042, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.544056, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544069, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544083, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544125, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.544179, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.544206, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.544244, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.544271, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544297, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544311, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544367, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.544425, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.544451, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.544493, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.544507, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544520, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544534, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544576, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.544616, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.544629, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.544679, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.544693, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544706, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544720, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544763, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.544790, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.544803, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.544841, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.544857, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544873, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544887, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.544928, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.544968, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.544981, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.545031, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.545045, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545058, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545071, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545112, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.545140, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.545153, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.545190, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.545204, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545217, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545230, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545272, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.545299, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.545312, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.545351, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.545365, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545378, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545392, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545433, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.545460, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.545477, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.545516, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.545529, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545542, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545556, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545610, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.545640, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.545666, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.545704, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.545719, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545732, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545746, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545788, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.545815, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.545829, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.545879, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.545892, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545905, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545921, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.545959, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.545986, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.545999, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.546036, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.546049, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546062, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546076, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546112, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.546138, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.546151, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.546191, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.546204, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546217, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546231, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546271, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.546305, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.546318, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.546356, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.546369, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546382, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546396, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546432, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.546459, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.546472, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.546516, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.546531, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546544, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546558, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546599, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.546626, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.546639, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.546677, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.546691, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546703, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546717, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546753, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.546780, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.546793, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.546831, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.546846, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546859, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546873, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.546909, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.546936, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.546949, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.546989, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.547003, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547016, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547030, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547066, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.547093, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.547106, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.547143, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.547157, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547169, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547183, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547219, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.547246, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.547259, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.547298, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.547312, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547324, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547338, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547374, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.547401, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.547414, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.547452, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.547465, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547482, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547496, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547532, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.547559, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.547572, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.547611, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.547627, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547640, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547654, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547689, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.547716, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.547729, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.547767, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.547780, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547793, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547807, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547845, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.547872, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.547885, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.547923, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.547936, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547951, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.547965, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548001, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.548027, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.548040, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.548078, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.548091, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548104, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548118, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548155, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.548182, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.548195, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.548233, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.548246, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548259, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548290, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548327, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.548355, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.548368, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.548408, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.548429, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548442, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548457, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548501, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.548529, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.548555, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.548594, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.548608, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548621, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548635, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548677, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.548705, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.548719, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.548761, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.548776, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548789, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548803, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548845, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.548874, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.548887, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.548927, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.548941, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548954, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.548968, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549014, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.549068, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.549082, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.549121, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.549136, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549150, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549164, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549206, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.549234, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.549247, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.549287, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.549308, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549323, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549339, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549384, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.549413, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.549426, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.549465, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.549484, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549497, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549511, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549554, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.549582, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.549595, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.549636, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.549650, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549663, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549677, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549719, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.549773, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.549787, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.549825, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.549839, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549852, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549867, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.549912, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.549941, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.549955, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.549996, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.550011, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550024, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550039, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550094, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.550124, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.550150, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.550191, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.550207, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550220, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550234, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550279, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.550307, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.550321, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.550360, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.550374, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550387, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550402, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550444, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.550473, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.550490, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.550529, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.550544, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550557, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550573, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550617, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.550645, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.550659, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.550697, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.550711, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550724, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550739, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550780, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.550809, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.550822, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.550864, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.550878, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550892, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550906, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.550949, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.550977, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.550991, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.551030, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.551046, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551059, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551074, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551116, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.551173, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.551186, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.551225, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.551239, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551252, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551270, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551327, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.551355, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.551368, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.551420, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.551434, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551447, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551461, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551521, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.551549, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.551575, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.551614, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.551628, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551641, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551655, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551723, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.551751, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.551764, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.551804, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.551818, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551831, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551846, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551888, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.551916, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.551930, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.551968, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.551984, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.551998, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552012, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552054, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.552082, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.552096, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.552136, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.552150, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552163, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552178, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552220, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.552248, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.552264, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.552303, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.552324, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552342, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552356, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552403, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.552434, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.552448, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.552493, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.552507, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552520, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552535, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552592, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.552620, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.552646, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.552684, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.552698, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552711, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552725, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552796, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.552824, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.552837, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.552876, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.552890, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552903, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552917, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.552959, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.552987, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.553001, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.553041, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.553058, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553071, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553086, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553142, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.553170, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.553196, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.553235, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.553249, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553262, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553276, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553345, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.553373, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.553386, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.553427, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.553441, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553454, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553468, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553514, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.553555, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.553568, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.553607, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.553621, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553638, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553652, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553690, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.553718, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.553731, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.553770, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.553783, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553796, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553810, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553846, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.553874, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.553887, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.553925, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.553940, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553953, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.553968, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554006, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.554033, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.554046, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.554085, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.554099, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554111, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554126, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554161, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.554189, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.554202, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.554243, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.554257, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554283, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554297, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554347, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.554374, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.554386, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.554424, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.554437, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554450, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554463, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554502, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.554529, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.554542, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.554581, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.554595, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554607, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554623, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554658, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.554685, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.554698, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.554735, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.554750, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554764, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554778, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554814, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.554842, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.554856, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.554893, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.554907, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554919, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554933, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.554969, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.554995, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.555008, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.555045, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.555059, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555072, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555086, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555123, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.555150, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.555163, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.555200, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.555214, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555226, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555240, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555276, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.555303, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.555316, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.555367, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.555381, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555394, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555408, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555445, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.555472, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.555489, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.555527, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.555541, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555554, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555568, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555604, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.555631, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.555643, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.555684, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.555699, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555712, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555726, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555762, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.555789, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.555801, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.555840, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.555853, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555866, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555880, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.555918, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.555945, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.555958, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.555995, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.556009, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556022, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556036, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556075, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.556102, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.556115, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.556155, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.556169, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556181, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556195, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556231, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.556258, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.556275, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.556318, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.556331, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556344, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556359, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556398, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.556438, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.556451, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.556495, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.556511, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556524, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556538, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556579, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.556632, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.556645, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.556683, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.556697, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556711, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556725, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556766, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.556794, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.556807, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.556847, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.556861, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556873, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556901, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.556943, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.556971, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.556984, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.557022, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.557036, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557049, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557063, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557107, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.557134, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.557147, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.557185, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.557200, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557213, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557227, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557295, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.557322, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.557335, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.557373, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.557387, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557399, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557415, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557459, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.557492, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.557505, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.557543, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.557557, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557569, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557583, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557625, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.557652, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.557665, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.557704, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.557718, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557731, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557745, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557803, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.557830, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.557843, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.557894, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.557907, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557920, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557934, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.557974, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.558002, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.558015, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.558053, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.558066, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558080, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558094, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558147, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.558175, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.558200, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.558238, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.558253, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558266, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558280, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558323, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.558351, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.558370, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.558413, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.558427, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558439, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558453, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558499, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.558527, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.558540, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.558578, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.558592, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558605, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558621, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558663, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.558691, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.558705, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.558742, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.558756, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558769, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558783, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558824, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.558852, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.558865, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.558906, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.558920, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558933, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558947, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.558988, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.559028, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.559041, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.559092, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.559108, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559121, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559135, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559176, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.559206, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.559219, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.559258, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.559271, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559284, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559298, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559339, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.559367, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.559380, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.559418, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.559431, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559444, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559458, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559506, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.559534, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.559547, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.559587, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.559602, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559615, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559629, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559670, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.559698, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.559711, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.559748, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.559762, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559774, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559790, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559831, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.559859, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.559872, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.559910, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.559925, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559938, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.559955, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560022, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.560049, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.560062, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.560100, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.560113, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560126, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560140, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560180, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.560233, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.560246, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.560296, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.560309, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560321, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560335, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560390, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.560446, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.560472, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.560513, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.560526, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560539, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560552, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560592, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.560619, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.560632, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.560668, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.560682, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560694, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560708, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560750, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.560777, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.560790, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.560827, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.560840, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560852, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560866, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.560910, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.560937, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.560950, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.560987, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.561002, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561015, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561028, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561083, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.561110, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.561123, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.561160, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.561173, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561186, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561200, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561235, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.561261, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.561274, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.561312, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.561326, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561339, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561352, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561394, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.561425, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.561438, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.561479, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.561493, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561506, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561520, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561556, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.561584, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.561596, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.561633, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.561646, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561658, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561672, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561707, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.561733, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.561745, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.561782, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.561797, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561809, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561823, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561860, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.561886, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.561898, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.561935, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.561948, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561960, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.561974, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562008, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.562034, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.562047, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.562085, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.562098, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562113, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562127, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562165, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.562191, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.562203, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.562242, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.562256, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562271, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562285, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562321, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.562347, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.562359, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.562396, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.562409, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562421, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562435, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562470, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.562500, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.562513, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.562550, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.562565, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562578, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562591, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562642, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.562698, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.562724, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.562775, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.562788, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562801, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562815, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562853, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.562880, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.562893, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.562931, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.562944, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562957, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.562971, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563006, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.563033, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.563046, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.563083, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.563097, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563109, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563125, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563162, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.563188, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.563201, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.563240, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.563254, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563267, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563281, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563317, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.563344, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.563357, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.563395, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.563408, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563421, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563435, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563470, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.563501, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.563514, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.563553, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.563569, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563582, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563596, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563632, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.563660, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.563673, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.563710, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.563724, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563736, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563750, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563786, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.563815, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.563828, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.563865, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.563879, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563891, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563905, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.563941, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.563967, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.563980, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.564018, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.564031, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564044, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564057, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564095, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.564122, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.564135, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.564179, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.564194, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564206, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564220, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564260, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.564299, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.564325, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.564363, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.564379, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564392, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564406, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564450, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.564482, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.564495, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.564533, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.564547, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564560, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564573, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564614, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.564641, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.564654, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.564695, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.564708, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564722, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564736, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564776, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.564804, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.564817, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.564854, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.564868, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564880, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564894, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.564937, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.564965, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.564978, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.565015, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.565031, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565044, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565058, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565125, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.565152, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.565165, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.565202, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.565216, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565230, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565244, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565287, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.565328, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.565340, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.565391, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.565404, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565416, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565430, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565471, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.565503, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.565515, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.565555, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.565569, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565581, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565595, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565636, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.565663, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.565676, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.565715, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.565728, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565741, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565755, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565795, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.565823, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.565836, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.565876, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.565890, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565902, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565916, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.565958, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.565985, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.565998, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.566036, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.566051, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566064, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566078, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566120, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.566148, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.566161, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.566198, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.566212, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566225, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566238, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566285, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.566337, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.566350, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.566388, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.566401, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566414, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566428, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566471, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.566504, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.566517, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.566555, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.566568, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566581, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566595, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566636, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.566664, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.566677, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.566717, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.566731, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566744, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566758, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566800, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.566852, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.566865, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.566903, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.566919, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566932, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566946, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.566987, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.567015, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.567029, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.567068, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.567082, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567095, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567109, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567176, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.567203, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.567217, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.567254, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.567268, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567280, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567300, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567363, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.567392, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.567417, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.567457, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.567471, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567488, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567502, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567543, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.567571, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.567584, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.567622, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.567635, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567648, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567664, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567707, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.567760, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.567773, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.567811, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.567826, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567839, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567853, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.567894, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.567922, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.567935, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.567974, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.567988, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568001, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568015, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568056, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.568083, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.568096, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.568133, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.568147, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568161, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568175, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568220, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.568247, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.568260, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.568301, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.568315, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568327, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568341, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568383, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.568410, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.568423, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.568461, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.568479, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568492, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568510, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568552, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.568579, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.568592, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.568630, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.568643, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568656, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568670, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568722, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.568749, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.568762, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.568801, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.568816, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568829, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568843, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568880, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.568906, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.568919, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.568957, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.568970, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568983, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.568997, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569032, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.569059, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.569072, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.569111, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.569125, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569138, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569151, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569188, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.569214, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.569227, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.569266, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.569279, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569292, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569305, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569341, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.569369, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.569382, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.569421, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.569434, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569447, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569461, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569503, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.569530, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.569543, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.569581, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.569596, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569609, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569636, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569676, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.569703, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.569716, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.569754, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.569768, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569781, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569794, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569830, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.569857, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.569870, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.569909, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.569923, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569935, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569949, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.569985, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.570012, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.570025, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.570065, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.570079, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570092, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570106, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570142, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.570169, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.570182, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.570219, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.570233, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570245, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570259, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570295, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.570331, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.570346, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.570384, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.570399, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570412, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570426, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570463, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.570496, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.570509, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.570547, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.570560, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570577, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570591, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570627, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.570654, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.570667, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.570705, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.570718, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570731, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570745, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570780, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.570807, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.570820, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.570857, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.570871, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570884, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570897, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.570933, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.570960, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.570973, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.571012, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.571028, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571041, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571055, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571090, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.571117, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.571130, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.571168, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.571181, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571194, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571208, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571244, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.571273, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.571286, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.571325, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.571341, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571355, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571369, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571405, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.571432, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.571445, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.571502, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.571529, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571542, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571558, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571594, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.571623, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.571636, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.571673, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.571687, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571700, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571714, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571750, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.571777, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.571790, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.571827, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.571841, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571853, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571867, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.571905, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.571932, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.571945, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.571982, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.571996, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572008, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572022, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572067, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.572097, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.572110, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.572163, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.572181, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572194, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572208, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572250, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.572281, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.572294, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.572332, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.572346, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572359, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572374, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572415, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.572457, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.572470, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.572517, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.572531, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572544, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572559, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572601, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.572629, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.572642, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.572684, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.572699, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572712, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572726, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572769, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.572797, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.572810, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.572849, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.572864, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572877, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572892, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.572934, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.572962, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.572975, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.573014, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.573028, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573041, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573055, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573099, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.573153, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.573166, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.573205, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.573218, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573231, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573245, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573288, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.573315, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.573328, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.573408, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.573435, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573448, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573463, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573568, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.573597, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.573610, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.573650, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.573663, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573677, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573691, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573733, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.573762, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.573776, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.573815, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.573829, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573844, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573859, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.573901, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.573930, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.573943, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.573982, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.573998, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574012, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574026, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574083, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.574111, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.574124, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.574177, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.574190, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574204, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574218, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574264, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.574318, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.574332, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.574373, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.574388, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574400, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574415, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574457, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.574490, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.574504, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.574543, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.574557, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574570, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574585, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574626, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.574655, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.574668, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.574709, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.574724, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574737, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574751, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574806, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.574835, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.574848, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.574900, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.574915, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574930, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.574944, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575003, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.575032, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.575045, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.575098, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.575111, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575124, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575139, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575180, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.575233, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.575246, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.575285, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.575299, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575312, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575326, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575370, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.575398, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.575412, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.575452, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.575467, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575484, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575499, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575542, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.575570, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.575583, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.575622, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.575636, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575649, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4973(create_file_default)
>  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575665, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:4450(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x4 ea_list = 0x0x0, sd = 0x0x0, fname = openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:03.575734, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:301(get_ea_names_from_file)
>  get_ea_names_from_file: ea_namelist size = 52
>[2016/07/13 05:21:03.575762, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:210(get_ea_value)
>  get_ea_value: EA user.DosStream.Zone.Identifier:$DATA is of length 27
>[2016/07/13 05:21:03.575775, 10, pid=18124, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data)
>  [0000] 5B 5A 6F 6E 65 54 72 61   6E 73 66 65 72 5D 0D 0A   [ZoneTra nsfer]..
>  [0010] 5A 6F 6E 65 49 64 3D 33   0D 0A 00                  ZoneId=3 ...
>[2016/07/13 05:21:03.575814, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3866(open_streams_for_delete)
>  open_streams_for_delete found 2 streams
>[2016/07/13 05:21:03.575829, 10, pid=18124, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:3897(open_streams_for_delete)
>  Unable to stat stream: openvpn.zip:Zone.Identifier:$DATA
>[2016/07/13 05:21:0