The Samba-Bugzilla – Attachment 1389 Details for
Bug 3017
Mangled names in regedit confirm
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
log level 10 of regedit up to confirm prompt
log.smbd.regedit (text/plain), 529.48 KB, created by
William Jojo
on 2005-08-18 13:16:33 UTC
(
hide
)
Description:
log level 10 of regedit up to confirm prompt
Filename:
MIME Type:
Creator:
William Jojo
Created:
2005-08-18 13:16:33 UTC
Size:
529.48 KB
patch
obsolete
>[2005/08/18 16:01:12, 0] smbd/server.c:main(802) > smbd version 3.0.20rc2 started. > Copyright Andrew Tridgell and the Samba Team 1992-2004 >[2005/08/18 16:01:12, 5] lib/debug.c:debug_dump_status(368) > INFO: Current debug levels: > all: True/10 > tdb: False/0 > printdrivers: False/0 > lanman: False/0 > smb: False/0 > rpc_parse: False/0 > rpc_srv: False/0 > rpc_cli: False/0 > passdb: False/0 > sam: False/0 > auth: False/0 > winbind: False/0 > vfs: False/0 > idmap: False/0 > quota: False/0 > acls: True/0 > locking: False/0 > msdfs: False/0 > doing parameter security = user > doing parameter encrypt passwords = yes > doing parameter socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=262144 SO_RCVBUF=262144 > doing parameter interfaces = 151.103.16.159/20 > doing parameter local master = yes > doing parameter os level = 60 > doing parameter domain master = yes > doing parameter preferred master = yes > doing parameter domain logons = yes > doing parameter logon script = %m.bat > doing parameter wins support = no > doing parameter dns proxy = no > doing parameter enable privileges = yes > doing parameter oplocks = no > doing parameter level2 oplocks = no > doing parameter csc policy = disable > doing parameter printcap name = /etc/qconfig > doing parameter ldap passwd sync = yes > doing parameter passdb backend = ldapsam:"ldap://acedev.hvcc.edu" > doing parameter ldap suffix = dc=hvcc,dc=edu > doing parameter ldap machine suffix = ou=People > doing parameter ldap user suffix = ou=People > doing parameter ldap group suffix = ou=Groups > doing parameter ldap idmap suffix = ou=Idmap > doing parameter ldap admin dn = cn=root,dc=hvcc,dc=edu > doing parameter idmap backend = ldap:ldap://acedev.hvcc.edu > doing parameter large readwrite = no > doing parameter kernel oplocks = no > doing parameter max open files = 5000 > doing parameter wide links = no > doing parameter lpq command = touch /dev/null > doing parameter max disk size = 0 > doing parameter read raw = yes > doing parameter write raw = yes > doing parameter getwd cache = yes > doing parameter time server = true > doing parameter logon drive = h: > doing parameter netbios name = acedev >[2005/08/18 16:01:12, 4] param/loadparm.c:handle_netbios_name(2881) > handle_netbios_name: set global_myname to: ACEDEV > doing parameter unix password sync = false > doing parameter deadtime = 0 > doing parameter short preserve case = no >[2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) > Processing section "[homes]" >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 0 for homes > doing parameter comment = Home Directories > doing parameter browseable = no > doing parameter valid users = test1 test2 test3 test4 test5 test6 test7 test8 test9 testxp billtest geotest tomtest 98765432 > doing parameter writeable = yes > doing parameter path = %H > doing parameter locking = yes > doing parameter guest ok = no > doing parameter force create mode = 0644 > doing parameter force directory mode = 0755 > doing parameter csc policy = disable > doing parameter short preserve case = no >[2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) > Processing section "[netlogon]" >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 1 for netlogon > doing parameter comment = Network Logon Service > doing parameter path = /netlogon > doing parameter guest ok = no > doing parameter writeable = no > doing parameter browseable = no >[2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) > Processing section "[x04shr]" >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 2 for x04shr > doing parameter browseable = no > doing parameter comment = Summer 2004 DEVELOPMENT Share > doing parameter path = /x04shr > doing parameter writeable = yes > doing parameter guest ok = no > doing parameter oplocks = no > doing parameter level2 oplocks = no > doing parameter short preserve case = no > doing parameter use sendfile = yes >[2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) > Processing section "[test]" >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 3 for test > doing parameter browseable = no > doing parameter comment = Test Share > doing parameter valid users = billtest > doing parameter path = /s05shr > doing parameter writable = yes > doing parameter guest ok = no > doing parameter create mode = 0664 > doing parameter directory mode = 0775 > doing parameter force create mode = 0664 > doing parameter force directory mode = 0775 > doing parameter short preserve case = no >[2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) > Processing section "[printers]" >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 4 for printers > doing parameter comment = All Printers > doing parameter path = /var/spool/samba > doing parameter browseable = no > doing parameter guest ok = no > doing parameter writeable = no > doing parameter printable = yes >[2005/08/18 16:01:12, 4] param/loadparm.c:lp_load(4113) > pm_process() returned Yes >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 5 for IPC$ >[2005/08/18 16:01:12, 3] param/loadparm.c:lp_add_ipc(2475) > adding IPC service >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 6 for ADMIN$ >[2005/08/18 16:01:12, 3] param/loadparm.c:lp_add_ipc(2475) > adding IPC service >[2005/08/18 16:01:12, 10] param/loadparm.c:set_server_role(4031) > set_server_role: role = ROLE_DOMAIN_PDC >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UCS-2LE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset UCS-2LE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF-16LE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset UTF-16LE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UCS-2BE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset UCS-2BE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF-16BE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset UTF-16BE >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF8 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset UTF8 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF-8 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset UTF-8 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset ASCII >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset ASCII >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset 646 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset 646 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset ISO-8859-1 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset ISO-8859-1 >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UCS2-HEX >[2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) > Registered charset UCS2-HEX >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'ISO8859-1' for LOCALE >[2005/08/18 16:01:12, 3] printing/pcap.c:pcap_cache_reload(114) > reloading printcap cache >[2005/08/18 16:01:12, 5] printing/print_aix.c:aix_cache_reload(41) > reloading aix printcap cache >[2005/08/18 16:01:12, 3] printing/pcap.c:pcap_cache_reload(213) > reload status: ok >[2005/08/18 16:01:12, 7] param/loadparm.c:lp_servicenumber(4226) > lp_servicenumber: couldn't find laser3 >[2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 7 for laser3 >[2005/08/18 16:01:12, 3] param/loadparm.c:lp_add_printer(2513) > adding printer service laser3 >[2005/08/18 16:01:12, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:12, 2] lib/interface.c:add_interface(81) > added interface ip=151.103.16.159 bcast=151.103.31.255 nmask=255.255.240.0 >[2005/08/18 16:01:12, 5] lib/util.c:init_names(260) > Netbios name list:- > my_netbios_names[0]="ACEDEV" >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_context_list(870) > Trying to load: ldapsam:ldap://acedev.hvcc.edu >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend ldapsam >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'ldapsam' >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend ldapsam_compat >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'ldapsam_compat' >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend NDS_ldapsam >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'NDS_ldapsam' >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend NDS_ldapsam_compat >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'NDS_ldapsam_compat' >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend smbpasswd >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'smbpasswd' >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend tdbsam >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'tdbsam' >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend guest >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'guest' >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(748) > Attempting to find an passdb backend to match ldapsam:ldap://acedev.hvcc.edu (ldapsam) >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(769) > Found pdb backend ldapsam >[2005/08/18 16:01:12, 2] lib/smbldap_util.c:smbldap_search_domain_info(169) > Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=ACDEV))] >[2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_search_ext(980) > smbldap_search_ext: base => [dc=hvcc,dc=edu], filter => [(&(objectClass=sambaDomain)(sambaDomainName=ACDEV))], scope => [2] >[2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_close(889) > The connection to the LDAP server was closed >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_open_connection(534) > smbldap_open_connection: ldap://acedev.hvcc.edu >[2005/08/18 16:01:12, 2] lib/smbldap.c:smbldap_open_connection(630) > smbldap_open_connection: connection opened >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_connect_system(762) > ldap_connect_system: Binding to ldap server ldap://acedev.hvcc.edu as "cn=root,dc=hvcc,dc=edu" >[2005/08/18 16:01:12, 3] lib/smbldap.c:smbldap_connect_system(805) > ldap_connect_system: succesful connection to the LDAP server > ldap_connect_system: LDAP server does support paged results >[2005/08/18 16:01:12, 4] lib/smbldap.c:smbldap_open(869) > The LDAP server is succesfully connected >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(772) > pdb backend ldapsam:ldap://acedev.hvcc.edu has a valid init >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(748) > Attempting to find an passdb backend to match guest (guest) >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(769) > Found pdb backend guest >[2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(772) > pdb backend guest has a valid init >[2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_search_ext(980) > smbldap_search_ext: base => [dc=hvcc,dc=edu], filter => [(&(sambaSID=S-1-5-21-1908802895-3536710745-1580887524-501)(objectclass=sambaSamAccount))], scope => [2] >[2005/08/18 16:01:12, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) > init_sam_from_ldap: Entry found for user: nobody >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_username(617) > pdb_set_username: setting username nobody, was >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_domain(644) > pdb_set_domain: setting domain ACDEV, was >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) > pdb_set_nt_username: setting nt username nobody, was >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(557) > pdb_set_user_sid_from_string: setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) > pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_group_sid_from_string(592) > pdb_set_group_sid_from_string: setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) > pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaPwdLastSet] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogonTime] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogoffTime] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaKickoffTime] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaPwdCanChange] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaPwdMustChange] = [<does not exist>] >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) > pdb_set_full_name: setting full name nobody,Special Id, was >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaHomeDrive] = [<does not exist>] >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) > pdb_set_dir_drive: setting dir drive h:, was NULL >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaHomePath] = [<does not exist>] >[2005/08/18 16:01:12, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) > pdb_set_homedir: setting home dir \\acedev\nobody, was >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogonScript] = [<does not exist>] >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) > pdb_set_logon_script: setting logon script smbd.bat, was >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaProfilePath] = [<does not exist>] >[2005/08/18 16:01:12, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) > pdb_set_profile_path: setting profile path \\acedev\nobody\profile, was >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaUserWorkstations] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaMungedDial] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLMPassword] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaNTPassword] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) > grant_privilege: S-1-1-0 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) > grant_privilege: S-1-5-32-544 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) > grant_privilege: S-1-5-32-548 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) > grant_privilege: S-1-5-32-549 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) > grant_privilege: S-1-5-32-550 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) > grant_privilege: S-1-5-32-551 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 10] lib/account_pol.c:account_policy_get(202) > account_policy_get: password history:0 >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaAcctFlags] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaBadPasswordCount] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaBadPasswordTime] = [<does not exist>] >[2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogonHours] = [<does not exist>] >[2005/08/18 16:01:12, 5] passdb/login_cache.c:login_cache_init(41) > Opening cache file at /samba/3.0.20rc2/var/locks/login_cache.tdb >[2005/08/18 16:01:12, 7] passdb/login_cache.c:login_cache_read(83) > Looking up login cache for user nobody >[2005/08/18 16:01:12, 7] passdb/login_cache.c:login_cache_read(97) > No cache entry found >[2005/08/18 16:01:12, 9] passdb/pdb_ldap.c:init_sam_from_ldap(852) > No cache entry, bad count = 0, bad time = 0 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:12, 10] lib/system_smbd.c:sys_getgrouplist(116) > sys_getgrouplist: user [nobody] >[2005/08/18 16:01:12, 10] lib/system_smbd.c:sys_getgrouplist(125) > sys_getgrouplist(): disabled winbindd for group lookup [user == nobody] >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:12, 8] lib/util_getent.c:remove_duplicate_gids(330) > remove_duplicate_gids: Enter 2 gids >[2005/08/18 16:01:12, 8] lib/util_getent.c:remove_duplicate_gids(348) > remove_duplicate_gids: Exit 1 gids >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_search_ext(980) > smbldap_search_ext: base => [ou=Groups,dc=hvcc,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=-2))], scope => [2] >[2005/08/18 16:01:12, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2107) > ldapsam_getgroup: Did not find group >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:12, 10] passdb/passdb.c:local_gid_to_sid(1250) > local_gid_to_sid: Fall back to algorithmic mapping: 4294967294 -> S-1-5-21-1908802895-3536710745-1580887524-997 >[2005/08/18 16:01:12, 10] passdb/lookup_sid.c:gid_to_sid(371) > gid_to_sid: local 4294967294 -> S-1-5-21-1908802895-3536710745-1580887524-997 >[2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-501] >[2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-514] >[2005/08/18 16:01:12, 5] lib/privileges.c:get_privileges_for_sids(452) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-997] >[2005/08/18 16:01:12, 10] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-501 > contains 6 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-501 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-514 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > SID[ 5]: S-1-5-21-1908802895-3536710745-1580887524-997 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:12, 5] auth/auth_util.c:make_server_info_sam(829) > make_server_info_sam: made server info for user nobody -> nobody >[2005/08/18 16:01:12, 3] smbd/server.c:main(835) > loaded services >[2005/08/18 16:01:12, 3] smbd/server.c:main(850) > Becoming a daemon. >[2005/08/18 16:01:12, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 9 12 0 1 2 >[2005/08/18 16:01:12, 8] lib/util.c:fcntl_lock(1850) > fcntl_lock: Lock call successful >[2005/08/18 16:01:12, 5] tdb/tdbutil.c:tdb_log(767) > tdb(unnamed): tdb_brlock failed (fd=10) at offset 4 rw_type=2 lck_type=6: Permission denied >[2005/08/18 16:01:12, 2] lib/tallocmsg.c:register_msg_pool_usage(56) > Registered MSG_REQ_POOL_USAGE >[2005/08/18 16:01:12, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) > Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED >[2005/08/18 16:01:12, 5] lib/gencache.c:gencache_init(59) > Opening cache file at /samba/3.0.20rc2/var/locks/gencache.tdb >[2005/08/18 16:01:12, 5] libsmb/namecache.c:namecache_enable(58) > namecache_enable: enabling netbios namecache, timeout 660 seconds >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Print] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] with subkey [Printers] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Ports] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [LanmanServer] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer] with subkey [Shares] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Eventlog] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [009] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [Monitors] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [ProductOptions] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [TcpIp] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp] with subkey [Parameters] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Netlogon] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon] with subkey [Parameters] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKU] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKU] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKCR] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKCR] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKPD] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKPD] with subkey [NULL] >[2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) > init_registry_data: Adding [HKPT] >[2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) > init_registry_data: Storing key [HKPT] with subkey [NULL] >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) > specific: [Samba Printer Port], len: 2 >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) > regdb_store_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) > specific: [DefaultSpoolDirectory], len: 70 >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) > regdb_store_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) > specific: [DisplayName], len: 20 >[2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) > specific: [ErrorControl], len: 4 >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) > specific: [ErrorControl], len: 4 >[2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) > specific: [DisplayName], len: 20 >[2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) > pathtree_add: Enter >[2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) > pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) > pathtree_add: Exit >[2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) > pathtree_add: Enter >[2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) > pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) > pathtree_add: Exit >[2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) > pathtree_add: Enter >[2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) > pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) > pathtree_add: Exit >[2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/Eventlog] >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) > pathtree_add: Enter >[2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) > pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Eventlog] to tree >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) > pathtree_add: Exit >[2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) > pathtree_add: Enter >[2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) > pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree >[2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) > pathtree_add: Exit >[2005/08/18 16:01:12, 10] printing/nt_printing.c:update_c_setprinter(697) > update_c_setprinter: c_setprinter = 0 >[2005/08/18 16:01:12, 5] smbd/connection.c:claim_connection(170) > claiming 0 >[2005/08/18 16:01:12, 3] printing/printing.c:start_background_queue(1315) > start_background_queue: Starting background LPQ thread >[2005/08/18 16:01:12, 5] printing/printing.c:start_background_queue(1325) > start_background_queue: background LPQ thread started >[2005/08/18 16:01:12, 5] smbd/connection.c:claim_connection(170) > claiming smbd lpq backend 0 >[2005/08/18 16:01:12, 10] lib/util_sock.c:open_socket_in(832) > bind succeeded on port 445 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_KEEPALIVE = 8 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEADDR = 4 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_BROADCAST = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_NODELAY = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPCNT = 8 >[2005/08/18 16:01:12, 5] printing/printing.c:start_background_queue(1336) > start_background_queue: background LPQ thread waiting for messages >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPIDLE = 7200 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPINTVL = 75 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_LOWDELAY = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_THROUGHPUT = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEPORT = 512 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDBUF = 16384 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVBUF = 16384 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDLOWAT = 4096 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVLOWAT = 1 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDTIMEO = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVTIMEO = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_KEEPALIVE = 8 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEADDR = 4 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_BROADCAST = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_NODELAY = 4 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPCNT = 8 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPIDLE = 7200 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPINTVL = 75 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_LOWDELAY = 16 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_THROUGHPUT = 16 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEPORT = 512 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDBUF = 262144 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVBUF = 262144 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDLOWAT = 4096 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVLOWAT = 1 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDTIMEO = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVTIMEO = 0 >[2005/08/18 16:01:12, 10] lib/util_sock.c:open_socket_in(832) > bind succeeded on port 139 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_KEEPALIVE = 8 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEADDR = 4 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_BROADCAST = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_NODELAY = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPCNT = 8 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPIDLE = 7200 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPINTVL = 75 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_LOWDELAY = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_THROUGHPUT = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEPORT = 512 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDBUF = 16384 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVBUF = 16384 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDLOWAT = 4096 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVLOWAT = 1 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDTIMEO = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVTIMEO = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_KEEPALIVE = 8 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEADDR = 4 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_BROADCAST = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_NODELAY = 4 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPCNT = 8 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPIDLE = 7200 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPINTVL = 75 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_LOWDELAY = 16 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_THROUGHPUT = 16 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEPORT = 512 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDBUF = 262144 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVBUF = 262144 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDLOWAT = 4096 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVLOWAT = 1 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDTIMEO = 0 >[2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVTIMEO = 0 >[2005/08/18 16:01:12, 2] smbd/server.c:open_sockets_smbd(330) > waiting for a connection >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_KEEPALIVE = 8 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEADDR = 4 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_BROADCAST = 0 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_NODELAY = 4 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPCNT = 8 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPIDLE = 7200 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPINTVL = 75 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_LOWDELAY = 0 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_THROUGHPUT = 0 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEPORT = 512 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDBUF = 262800 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVBUF = 262800 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDLOWAT = 16060 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVLOWAT = 1 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDTIMEO = 0 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVTIMEO = 0 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_KEEPALIVE = 8 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEADDR = 4 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_BROADCAST = 0 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_NODELAY = 4 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPCNT = 8 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPIDLE = 7200 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option TCP_KEEPINTVL = 75 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_LOWDELAY = 16 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option IPTOS_THROUGHPUT = 16 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_REUSEPORT = 512 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDBUF = 262144 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVBUF = 262144 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDLOWAT = 16060 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVLOWAT = 1 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_SNDTIMEO = 0 >[2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) > socket option SO_RCVTIMEO = 0 >[2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:18, 3] smbd/oplock.c:init_oplocks(1380) > open_oplock_ipc: opening loopback UDP socket. >[2005/08/18 16:01:18, 10] lib/util_sock.c:open_socket_in(832) > bind succeeded on port 0 >[2005/08/18 16:01:18, 3] smbd/oplock.c:init_oplocks(1411) > open_oplock ipc: pid = 17002, global_oplock_port = 34912 >[2005/08/18 16:01:18, 4] lib/time.c:get_serverzone(125) > Serverzone is 14400 >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 133 >[2005/08/18 16:01:18, 3] lib/access.c:check_access(313) > check_access: no hostnames in host allow/deny list. >[2005/08/18 16:01:18, 2] lib/access.c:check_access(324) > Allowed connection from (151.103.17.49) >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x85 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 0 of length 137 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=133 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51283 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=0 > smb_bcc=98 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG > [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 > [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for > [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. > [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM > [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 > [060] 32 00 2. >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBnegprot (pid 17002) conn 0x0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) > Requested protocol [PC NETWORK PROGRAM 1.0] >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) > Requested protocol [LANMAN1.0] >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) > Requested protocol [Windows for Workgroups 3.1a] >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) > Requested protocol [LM1.2X002] >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) > Requested protocol [LANMAN2.1] >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) > Requested protocol [NT LM 0.12] >[2005/08/18 16:01:18, 10] lib/util.c:set_remote_arch(2028) > set_remote_arch: Client arch is 'Win2K' >[2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:18, 5] smbd/connection.c:claim_connection(170) > claiming 0 >[2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_nt1(337) > using SPNEGO >[2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(559) > Selected protocol NT LM 0.12 >[2005/08/18 16:01:18, 5] smbd/negprot.c:reply_negprot(565) > negprot index=5 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=17 > smb_vwv[ 0]= 5 (0x5) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=27136 (0x6A00) > smb_vwv[ 8]= 66 (0x42) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32771 (0x8003) > smb_vwv[11]= 128 (0x80) > smb_vwv[12]=37179 (0x913B) > smb_vwv[13]=12184 (0x2F98) > smb_vwv[14]=50596 (0xC5A4) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]=14848 (0x3A00) > smb_bcc=58 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 61 63 65 64 65 76 00 00 00 00 00 00 00 00 00 00 acedev.. ........ > [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... > [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... > [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 228 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0xe4 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 1 of length 232 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=228 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=19264 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 228 (0xE4) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 66 (0x42) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=169 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 60 40 06 06 2B 06 01 05 05 02 A0 36 30 34 A0 0E `@..+... ...604.. > [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 22 0...+... ..7...." > [020] 04 20 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 . NTLMSS P....... > [030] 08 E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 ...W.i.n .d.o.w.s > [050] 00 20 00 32 00 30 00 30 00 32 00 20 00 53 00 65 . .2.0.0 .2. .S.e > [060] 00 72 00 76 00 69 00 63 00 65 00 20 00 50 00 61 .r.v.i.c .e. .P.a > [070] 00 63 00 6B 00 20 00 31 00 20 00 32 00 36 00 30 .c.k. .1 . .2.6.0 > [080] 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .0...W.i .n.d.o.w > [090] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 35 .s. .2.0 .0.2. .5 > [0A0] 00 2E 00 31 00 00 00 00 00 ...1.... . >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBsesssetupX (pid 17002) conn 0x0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) > wct=12 flg2=0xc807 >[2005/08/18 16:01:18, 2] smbd/sesssetup.c:setup_new_vc_session(704) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) > Doing spnego session setup >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) > NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2005/08/18 16:01:18, 10] lib/util.c:set_remote_arch(2028) > set_remote_arch: Client arch is 'WinXP' >[2005/08/18 16:01:18, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 100 >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_spnego_negotiate(480) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_spnego_negotiate(483) > Got secblob of size 32 >[2005/08/18 16:01:18, 5] auth/auth.c:make_auth_context_subsystem(482) > Making default auth method list for DC, security=user, encrypt passwords = yes >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend rhosts >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'rhosts' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend hostsequiv >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'hostsequiv' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend sam >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'sam' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend sam_ignoredomain >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'sam_ignoredomain' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend unix >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'unix' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend winbind >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'winbind' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend smbserver >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'smbserver' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend trustdomain >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'trustdomain' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend ntdomain >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'ntdomain' >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend guest >[2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'guest' >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match guest >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method guest has a valid init >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match sam >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method sam has a valid init >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match winbind:trustdomain >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match trustdomain >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method trustdomain has a valid init >[2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method winbind has a valid init >[2005/08/18 16:01:18, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) > Got NTLMSSP neg_flags=0xe0088297 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_NEGOTIATE_OEM > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_LM_KEY > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module guest did not want to specify a challenge >[2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module sam did not want to specify a challenge >[2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module winbind did not want to specify a challenge >[2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(135) > auth_context challenge created by random >[2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(136) > challenge is: >[2005/08/18 16:01:18, 5] lib/util.c:dump_data(2053) > [000] 7F 2F 81 BE 4C FD FA D9 ./..L... >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=274 > smb_com=0x73 > smb_rcls=22 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=100 > smb_mid=19264 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 177 (0xB1) > smb_bcc=231 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] A1 81 AE 30 81 AB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ > [010] 06 01 04 01 82 37 02 02 0A A2 81 95 04 81 92 4E .....7.. .......N > [020] 54 4C 4D 53 53 50 00 02 00 00 00 0A 00 0A 00 30 TLMSSP.. .......0 > [030] 00 00 00 95 82 89 60 7F 2F 81 BE 4C FD FA D9 00 ......`. /..L.... > [040] 00 00 00 00 00 00 00 58 00 58 00 3A 00 00 00 41 .......X .X.:...A > [050] 00 43 00 44 00 45 00 56 00 02 00 0A 00 41 00 43 .C.D.E.V .....A.C > [060] 00 44 00 45 00 56 00 01 00 0C 00 41 00 43 00 45 .D.E.V.. ...A.C.E > [070] 00 44 00 45 00 56 00 04 00 10 00 68 00 76 00 63 .D.E.V.. ...h.v.c > [080] 00 63 00 2E 00 65 00 64 00 75 00 03 00 1E 00 61 .c...e.d .u.....a > [090] 00 63 00 65 00 64 00 65 00 76 00 2E 00 68 00 76 .c.e.d.e .v...h.v > [0A0] 00 63 00 63 00 2E 00 65 00 64 00 75 00 00 00 00 .c.c...e .d.u.... > [0B0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m > [0C0] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2 > [0D0] 00 30 00 72 00 63 00 32 00 00 00 41 00 43 00 44 .0.r.c.2 ...A.C.D > [0E0] 00 45 00 56 00 00 00 .E.V... >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 378 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x17a >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 2 of length 382 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=378 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=100 > smb_mid=19328 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 378 (0x17A) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 216 (0xD8) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=319 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] A1 81 D5 30 81 D2 A2 81 CF 04 81 CC 4E 54 4C 4D ...0.... ....NTLM > [010] 53 53 50 00 03 00 00 00 18 00 18 00 8C 00 00 00 SSP..... ........ > [020] 18 00 18 00 A4 00 00 00 1E 00 1E 00 40 00 00 00 ........ ....@... > [030] 10 00 10 00 5E 00 00 00 1E 00 1E 00 6E 00 00 00 ....^... ....n... > [040] 10 00 10 00 BC 00 00 00 15 82 88 60 48 00 55 00 ........ ...`H.U. > [050] 44 00 53 00 4F 00 4E 00 2D 00 34 00 45 00 35 00 D.S.O.N. -.4.E.5. > [060] 36 00 36 00 53 00 47 00 4B 00 62 00 69 00 6C 00 6.6.S.G. K.b.i.l. > [070] 6C 00 74 00 65 00 73 00 74 00 48 00 55 00 44 00 l.t.e.s. t.H.U.D. > [080] 53 00 4F 00 4E 00 2D 00 34 00 45 00 35 00 36 00 S.O.N.-. 4.E.5.6. > [090] 36 00 53 00 47 00 4B 00 3E 91 8E 98 22 F9 DF 4F 6.S.G.K. >..."..O > [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0B0] A1 70 C1 21 65 4F 9D 0D DB 07 41 F6 CF 96 47 AF .p.!eO.. ..A...G. > [0C0] 92 0B C2 B1 93 D8 70 6B D4 82 53 FF 43 81 00 F7 ......pk ..S.C... > [0D0] AF 56 BF 1C 24 71 CF 6A 00 57 00 69 00 6E 00 64 .V..$q.j .W.i.n.d > [0E0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 > [0F0] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [100] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 20 . .P.a.c .k. .1. > [110] 00 32 00 36 00 30 00 30 00 00 00 57 00 69 00 6E .2.6.0.0 ...W.i.n > [120] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 > [130] 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 00 .2. .5.. .1..... >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBsesssetupX (pid 17002) conn 0x0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) > wct=12 flg2=0xc807 >[2005/08/18 16:01:18, 2] smbd/sesssetup.c:setup_new_vc_session(704) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) > Doing spnego session setup >[2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) > NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2005/08/18 16:01:18, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) > Got user=[billtest] domain=[HUDSON-4E566SGK] workstation=[HUDSON-4E566SGK] len1=24 len2=24 >[2005/08/18 16:01:18, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66) > auth_context challenge set by NTLMSSP callback (NTLM2) >[2005/08/18 16:01:18, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67) > challenge is: >[2005/08/18 16:01:18, 5] lib/util.c:dump_data(2053) > [000] 5B 23 F4 C3 9B D8 1D A4 [#...... >[2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info_map(191) > make_user_info_map: Mapping user [HUDSON-4E566SGK]\[billtest] from workstation [HUDSON-4E566SGK] >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] auth/auth_util.c:is_trusted_domain(1541) > is_trusted_domain: Checking for domain trust with [HUDSON-4E566SGK] >[2005/08/18 16:01:18, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(325) > secrets_fetch failed! >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 10] lib/gencache.c:gencache_get(285) > Cache entry with key = TDOM/HUDSON-4E566SGK couldn't be found >[2005/08/18 16:01:18, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) > no entry for trusted domain HUDSON-4E566SGK found. >[2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info(99) > attempting to make a user_info for billtest (billtest) >[2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info(109) > making strings for billtest's user_info struct >[2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info(151) > making blobs for billtest's user_info struct >[2005/08/18 16:01:18, 10] auth/auth_util.c:make_user_info(167) > made an encrypted user_info for billtest (billtest) >[2005/08/18 16:01:18, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking password for unmapped user [HUDSON-4E566SGK]\[billtest]@[HUDSON-4E566SGK] with the new password interface >[2005/08/18 16:01:18, 3] auth/auth.c:check_ntlm_password(222) > check_ntlm_password: mapped user is: [ACDEV]\[billtest]@[HUDSON-4E566SGK] >[2005/08/18 16:01:18, 10] auth/auth.c:check_ntlm_password(231) > check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) >[2005/08/18 16:01:18, 10] auth/auth.c:check_ntlm_password(233) > challenge is: >[2005/08/18 16:01:18, 5] lib/util.c:dump_data(2053) > [000] 5B 23 F4 C3 9B D8 1D A4 [#...... >[2005/08/18 16:01:18, 10] auth/auth.c:check_ntlm_password(259) > check_ntlm_password: guest had nothing to say >[2005/08/18 16:01:18, 8] lib/util.c:is_myname(1874) > is_myname("ACDEV") returns 0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] lib/smbldap.c:smbldap_search_ext(980) > smbldap_search_ext: base => [dc=hvcc,dc=edu], filter => [(&(uid=billtest)(objectclass=sambaSamAccount))], scope => [2] >[2005/08/18 16:01:18, 5] lib/smbldap.c:smbldap_close(889) > The connection to the LDAP server was closed >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_open_connection(534) > smbldap_open_connection: ldap://acedev.hvcc.edu >[2005/08/18 16:01:18, 2] lib/smbldap.c:smbldap_open_connection(630) > smbldap_open_connection: connection opened >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_connect_system(762) > ldap_connect_system: Binding to ldap server ldap://acedev.hvcc.edu as "cn=root,dc=hvcc,dc=edu" >[2005/08/18 16:01:18, 3] lib/smbldap.c:smbldap_connect_system(805) > ldap_connect_system: succesful connection to the LDAP server > ldap_connect_system: LDAP server does support paged results >[2005/08/18 16:01:18, 4] lib/smbldap.c:smbldap_open(869) > The LDAP server is succesfully connected >[2005/08/18 16:01:18, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) > init_sam_from_ldap: Entry found for user: billtest >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_username(617) > pdb_set_username: setting username billtest, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_domain(644) > pdb_set_domain: setting domain ACDEV, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) > pdb_set_nt_username: setting nt username billtest, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(557) > pdb_set_user_sid_from_string: setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) > pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_group_sid_from_string(592) > pdb_set_group_sid_from_string: setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) > pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogonTime] = [<does not exist>] >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogoffTime] = [<does not exist>] >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaKickoffTime] = [<does not exist>] >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) > pdb_set_full_name: setting full name Bill Test,Special Id, was >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaHomeDrive] = [<does not exist>] >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) > pdb_set_dir_drive: setting dir drive h:, was NULL >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaHomePath] = [<does not exist>] >[2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) > pdb_set_homedir: setting home dir \\acedev\billtest, was >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogonScript] = [<does not exist>] >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) > pdb_set_logon_script: setting logon script hudson-4e566sgk.bat, was >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaProfilePath] = [<does not exist>] >[2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) > pdb_set_profile_path: setting profile path \\acedev\billtest\profile, was >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaUserWorkstations] = [<does not exist>] >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaMungedDial] = [<does not exist>] >[2005/08/18 16:01:18, 10] lib/account_pol.c:account_policy_get(202) > account_policy_get: password history:0 >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaBadPasswordCount] = [<does not exist>] >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaBadPasswordTime] = [<does not exist>] >[2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) > smbldap_get_single_attribute: [sambaLogonHours] = [<does not exist>] >[2005/08/18 16:01:18, 7] passdb/login_cache.c:login_cache_read(83) > Looking up login cache for user billtest >[2005/08/18 16:01:18, 7] passdb/login_cache.c:login_cache_read(97) > No cache entry found >[2005/08/18 16:01:18, 9] passdb/pdb_ldap.c:init_sam_from_ldap(852) > No cache entry, bad count = 0, bad time = 0 >[2005/08/18 16:01:18, 10] lib/account_pol.c:account_policy_get(202) > account_policy_get: password history:0 >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_username(617) > pdb_set_username: setting username billtest, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_domain(644) > pdb_set_domain: setting domain ACDEV, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) > pdb_set_nt_username: setting nt username billtest, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) > pdb_set_full_name: setting full name Bill Test,Special Id, was >[2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) > pdb_set_homedir: setting home dir \\acedev\billtest, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) > pdb_set_dir_drive: setting dir drive h:, was NULL >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) > pdb_set_logon_script: setting logon script hudson-4e566sgk.bat, was >[2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) > pdb_set_profile_path: setting profile path \\acedev\billtest\profile, was >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_workstations(885) > pdb_set_workstations: setting workstations , was >[2005/08/18 16:01:18, 10] lib/account_pol.c:account_policy_get(202) > account_policy_get: password history:0 >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) > pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 >[2005/08/18 16:01:18, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 from rid 7952 >[2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) > pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 >[2005/08/18 16:01:18, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) > pdb_set_group_sid_from_rid: > setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 from rid 1413 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 9] passdb/passdb.c:pdb_update_autolock_flag(2333) > pdb_update_autolock_flag: Account billtest not autolocked, no check needed >[2005/08/18 16:01:18, 4] libsmb/ntlm_check.c:ntlm_password_check(326) > ntlm_password_check: Checking NT MD4 password >[2005/08/18 16:01:18, 4] auth/auth_sam.c:sam_account_ok(120) > sam_account_ok: Checking SMB password for user billtest >[2005/08/18 16:01:18, 5] auth/auth_sam.c:logon_hours_ok(102) > logon_hours_ok: user billtest allowed to logon at this time (Thu Aug 18 16:01:18 2005 > ) >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 10] lib/system_smbd.c:sys_getgrouplist(116) > sys_getgrouplist: user [billtest] >[2005/08/18 16:01:18, 10] lib/system_smbd.c:sys_getgrouplist(125) > sys_getgrouplist(): disabled winbindd for group lookup [user == billtest] >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 8] lib/util_getent.c:remove_duplicate_gids(330) > remove_duplicate_gids: Enter 2 gids >[2005/08/18 16:01:18, 8] lib/util_getent.c:remove_duplicate_gids(348) > remove_duplicate_gids: Exit 1 gids >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] lib/smbldap.c:smbldap_search_ext(980) > smbldap_search_ext: base => [ou=Groups,dc=hvcc,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=206))], scope => [2] >[2005/08/18 16:01:18, 2] passdb/pdb_ldap.c:init_group_from_ldap(2001) > init_group_from_ldap: Entry found for group: 206 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 10] passdb/passdb.c:local_gid_to_sid(1261) > local_gid_to_sid: gid (206) -> SID S-1-5-21-1908802895-3536710745-1580887524-1413. >[2005/08/18 16:01:18, 10] passdb/lookup_sid.c:gid_to_sid(371) > gid_to_sid: local 206 -> S-1-5-21-1908802895-3536710745-1580887524-1413 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-7952] >[2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-1413] >[2005/08/18 16:01:18, 5] lib/privileges.c:get_privileges_for_sids(452) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) > get_privileges: No privileges assigned to SID [S-1-5-11] >[2005/08/18 16:01:18, 10] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 > contains 5 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:make_server_info_sam(829) > make_server_info_sam: made server info for user billtest -> billtest >[2005/08/18 16:01:18, 3] auth/auth.c:check_ntlm_password(268) > check_ntlm_password: sam authentication for user [billtest] succeeded >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth.c:check_ntlm_password(294) > check_ntlm_password: PAM Account for user [billtest] succeeded >[2005/08/18 16:01:18, 2] auth/auth.c:check_ntlm_password(307) > check_ntlm_password: authentication for user [billtest] -> [billtest] -> [billtest] succeeded >[2005/08/18 16:01:18, 5] auth/auth_util.c:free_user_info(1361) > attempting to free (and zero) a user_info structure >[2005/08/18 16:01:18, 10] auth/auth_util.c:free_user_info(1364) > structure was created for billtest >[2005/08/18 16:01:18, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) > Got NT session key of length 16 >[2005/08/18 16:01:18, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) > Got LM session key of length 16 >[2005/08/18 16:01:18, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(669) > ntlmssp_server_auth: Created NTLM2 session key. >[2005/08/18 16:01:18, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) > NTLMSSP Sign/Seal - Initialising with flags: >[2005/08/18 16:01:18, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) > Got NTLMSSP neg_flags=0x60088215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2005/08/18 16:01:18, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 101 >[2005/08/18 16:01:18, 10] lib/util_pw.c:getpwnam_alloc(98) > Got billtest from pwnam_cache >[2005/08/18 16:01:18, 10] smbd/password.c:register_vuid(255) > register_vuid: (3476,206) billtest billtest ACDEV guest=0 >[2005/08/18 16:01:18, 3] smbd/password.c:register_vuid(257) > User name: billtest Real name: Bill Test,Special Id >[2005/08/18 16:01:18, 3] smbd/password.c:register_vuid(276) > UNIX uid 3476 is UNIX user billtest, and will be vuid 101 >[2005/08/18 16:01:18, 7] param/loadparm.c:lp_servicenumber(4226) > lp_servicenumber: couldn't find billtest >[2005/08/18 16:01:18, 3] smbd/password.c:register_vuid(305) > Adding homes service for user 'billtest' using home directory: '/home/billtest' >[2005/08/18 16:01:18, 8] param/loadparm.c:add_a_service(2393) > add_a_service: Creating snum = 8 for billtest >[2005/08/18 16:01:18, 3] param/loadparm.c:lp_add_home(2434) > adding home's share [billtest] for user 'billtest' at '%H' >[2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=106 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=101 > smb_mid=19328 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 9 (0x9) > smb_bcc=63 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x > [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 > [020] 00 2E 00 30 00 2E 00 32 00 30 00 72 00 63 00 32 ...0...2 .0.r.c.2 > [030] 00 00 00 41 00 43 00 44 00 45 00 56 00 00 00 ...A.C.D .E.V... >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 82 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x52 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 3 of length 86 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=82 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=101 > smb_mid=19392 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 82 (0x52) > smb_vwv[ 2]= 8 (0x8) > smb_vwv[ 3]= 1 (0x1) > smb_bcc=39 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 5C 00 41 00 43 00 45 00 44 00 45 00 56 .\.\.A.C .E.D.E.V > [010] 00 5C 00 58 00 30 00 34 00 53 00 48 00 52 00 00 .\.X.0.4 .S.H.R.. > [020] 00 3F 3F 3F 3F 3F 00 .?????. >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBtconX (pid 17002) conn 0x0 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:18, 4] smbd/reply.c:reply_tcon_and_X(618) > Client requested device type [?????] for share [X04SHR] >[2005/08/18 16:01:18, 5] smbd/service.c:make_connection(811) > making a connection to 'normal' service x04shr >[2005/08/18 16:01:18, 3] lib/access.c:check_access(313) > check_access: no hostnames in host allow/deny list. >[2005/08/18 16:01:18, 2] lib/access.c:check_access(324) > Allowed connection from (151.103.17.49) >[2005/08/18 16:01:18, 5] lib/username.c:Get_Pwnam_alloc(313) > Finding user billtest >[2005/08/18 16:01:18, 5] lib/username.c:Get_Pwnam_internals(262) > Trying _Get_Pwnam(), username as lowercase is billtest >[2005/08/18 16:01:18, 10] lib/util_pw.c:getpwnam_alloc(98) > Got billtest from pwnam_cache >[2005/08/18 16:01:18, 5] lib/username.c:Get_Pwnam_internals(290) > Get_Pwnam_internals did find user [billtest]! >[2005/08/18 16:01:18, 3] smbd/service.c:make_connection_snum(477) > Connect path is '/x04shr' for service [x04shr] >[2005/08/18 16:01:18, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) > get_share_security: using default secdesc for x04shr >[2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-7952. >[2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(250) >[2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-7952 > se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-1413 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 >[2005/08/18 16:01:18, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (2) granted. >[2005/08/18 16:01:18, 3] smbd/vfs.c:vfs_init_default(215) > Initialising default vfs hooks >[2005/08/18 16:01:18, 5] smbd/connection.c:claim_connection(170) > claiming x04shr 0 >[2005/08/18 16:01:18, 10] smbd/uid.c:is_share_read_only_for_user(122) > is_share_read_only_for_user: share x04shr is read-write for unix user billtest >[2005/08/18 16:01:18, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) > get_share_security: using default secdesc for x04shr >[2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-7952. >[2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(250) >[2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-7952 > se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-1413 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 >[2005/08/18 16:01:18, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (2) granted. >[2005/08/18 16:01:18, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) > get_share_security: using default secdesc for x04shr >[2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-7952. >[2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(250) >[2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-7952 > se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-1413 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 >[2005/08/18 16:01:18, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (2) granted. >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 > contains 5 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 3476 > Primary group is 206 and contains 1 supplementary groups > Group[ 0]: 206 >[2005/08/18 16:01:18, 5] smbd/uid.c:change_to_user(304) > change_to_user uid=(0,3476) gid=(0,206) >[2005/08/18 16:01:18, 1] smbd/service.c:make_connection_snum(662) > hudson-4e566sgk (151.103.17.49) connect to service x04shr initially as user billtest (uid=3476, gid=206) (pid 17002) >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:18, 3] smbd/reply.c:reply_tcon_and_X(666) > tconX service=X04SHR >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=54 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=19392 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 13 (0xD) > smb_bcc=13 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 76 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x4c >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 4 of length 80 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19456 > smt_wct=15 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 8 (0x8) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=11 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 00 00 ........ ... >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 > contains 5 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 3476 > Primary group is 206 and contains 1 supplementary groups > Group[ 0]: 206 >[2005/08/18 16:01:18, 5] smbd/uid.c:change_to_user(304) > change_to_user uid=(0,3476) gid=(0,206) >[2005/08/18 16:01:18, 4] smbd/vfs.c:vfs_ChDir(737) > vfs_ChDir to /x04shr >[2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:18, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2005/08/18 16:01:18, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2005/08/18 16:01:18, 3] smbd/vfs.c:reduce_name(919) > reduce_name [.] [/x04shr] >[2005/08/18 16:01:18, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [.] -> [/x04shr] >[2005/08/18 16:01:18, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: . reduced to /x04shr >[2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo . (fnum = -1) level=257 call=5 total_data=0 >[2005/08/18 16:01:18, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: . >[2005/08/18 16:01:18, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:18, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:18, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 14:40:49 2005 > access: Thu Aug 18 14:47:15 2005 > write: Thu Aug 18 14:40:49 2005 > change: Thu Aug 18 14:40:49 2005 > mode: 11 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19456 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 3B 55 ......NB Z$....;U > [010] 40 25 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 @%....NB Z$....NB > [020] 5A 24 A4 C5 01 11 00 00 00 Z$...... . >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 70 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x46 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 5 of length 74 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19520 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 02 01 ..... >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) > call_trans2qfsinfo: level = 258 >[2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfsinfo(2240) > call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 6, vol=x04shr serv=x04shr >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 30, useable_space = 131012 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 30, paramsize = 0, datasize = 30 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=86 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19520 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 30 (0x1E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 30 (0x1E) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=31 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 00 00 90 0B 83 0A 0C 00 00 ........ ........ > [010] 00 00 00 78 00 30 00 34 00 73 00 68 00 72 00 ...x.0.4 .s.h.r. >[2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) > SMBtrans2 info_level = 258 >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 70 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x46 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 6 of length 74 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19584 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 05 01 ..... >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) > call_trans2qfsinfo: level = 261 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19584 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 20 (0x14) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 20 (0x14) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=21 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 0B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 ........ .....N.T > [010] 00 46 00 53 00 .F.S. >[2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) > SMBtrans2 info_level = 261 >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 70 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x46 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 7 of length 74 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19648 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 05 01 ..... >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) > call_trans2qfsinfo: level = 261 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19648 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 20 (0x14) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 20 (0x14) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=21 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 0B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 ........ .....N.T > [010] 00 46 00 53 00 .F.S. >[2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) > SMBtrans2 info_level = 261 >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 70 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x46 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 8 of length 74 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19712 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 03 01 ..... >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) > call_trans2qfsinfo: level = 259 >[2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfsinfo(2268) > call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=80 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19712 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=25 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... > [010] 00 02 00 00 00 00 02 00 00 ........ . >[2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) > SMBtrans2 info_level = 259 >[2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 70 >[2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x46 >[2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) > Transaction 9 of length 74 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19776 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 03 01 ..... >[2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) > call_trans2qfsinfo: level = 259 >[2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfsinfo(2268) > call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 >[2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) > size=80 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19776 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=25 >[2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... > [010] 00 02 00 00 00 00 02 00 00 ........ . >[2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) > SMBtrans2 info_level = 259 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 86 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x56 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 10 of length 90 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=86 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19840 > smt_wct=15 > smb_vwv[ 0]= 18 (0x12) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 18 (0x12) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=21 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 16 00 56 05 06 00 04 01 00 00 00 00 5C .....V.. .......\ > [010] 00 2A 00 00 00 .*... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2findfirst(1628) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "*" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [*] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = *, dirpath = , start = * >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled * ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled * ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file * >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [*] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [*] -> [/x04shr/*] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: * reduced to /x04shr/* >[2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2findfirst(1682) > dir=./, mask = * >[2005/08/18 16:01:20, 5] smbd/dir.c:dptr_create(390) > dptr_create dir=./ >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [./] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [./] -> [/x04shr] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ./ reduced to /x04shr >[2005/08/18 16:01:20, 3] smbd/dir.c:dptr_create(509) > creating new dirptr 256 for path ./, expect_close = 1 >[2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2findfirst(1739) > dptr_num is 256, wcard = *, attr = 22 >[2005/08/18 16:01:20, 8] smbd/trans2.c:call_trans2findfirst(1744) > dirpath=<./> dontdescend=<> >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./. >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./. fname=. >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset -2147483648 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./.. >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./.. fname=.. >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./lost+found >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./lost+found fname=lost+found >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:name_map(613) > name_map: lost+found -> 09085312 -> L2I81E~A (cache=1) >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./xpapps >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./xpapps fname=xpapps >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./dos >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./dos fname=dos >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./ntapps >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./ntapps fname=ntapps >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./common >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning d >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning d >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./common fname=common >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./spsspatch.log >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./spsspatch.log fname=spsspatch.log >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:name_map(613) > name_map: spsspatch.log -> 7EEF1500 -> SZ7WO3~K.LOG (cache=1) >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./billtest >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning d >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning d >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./billtest fname=billtest >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./ghost.exe >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./ghost.exe fname=ghost.exe >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./ghost75.exe >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./ghost75.exe fname=ghost75.exe >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./susprod_notify.reg >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./susprod_notify.reg fname=susprod_notify.reg >[2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:name_map(613) > name_map: susprod_notify.reg -> 1E6847C1 -> S8FQAP~T.REG (cache=1) >[2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 >[2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2findfirst(1792) > call_trans2findfirst - (2) closing dptr_num 256 >[2005/08/18 16:01:20, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 1328, useable_space = 131010 >[2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 10, data_to_send = 1328, paramsize = 10, datasize = 1328 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=1396 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19840 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 1328 (0x530) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 1328 (0x530) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=1341 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 FD FF 0C 00 01 00 00 00 AC 04 00 00 60 00 00 ........ .....`.. > [010] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 00 68 C2 ......NB Z$....h. > [020] 99 2F A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 ./....NB Z$....NB > [030] 5A 24 A4 C5 01 00 00 00 00 00 00 00 00 00 00 00 Z$...... ........ > [040] 00 00 00 00 00 11 00 00 00 02 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 2E 00 64 00 00 ........ .....d.. > [070] 00 00 00 00 00 80 89 BC 28 0A A4 C5 01 00 68 C2 ........ (.....h. > [080] 99 2F A4 C5 01 80 89 BC 28 0A A4 C5 01 80 89 BC ./...... (....... > [090] 28 0A A4 C5 01 00 00 00 00 00 00 00 00 00 00 00 (....... ........ > [0A0] 00 00 00 00 00 11 00 00 00 04 00 00 00 00 00 00 ........ ........ > [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0C0] 00 00 00 00 00 00 00 00 00 00 00 2E 00 2E 00 00 ........ ........ > [0D0] 00 74 00 00 00 00 00 00 00 00 FA A1 A3 9D 57 C4 .t...... ......W. > [0E0] 01 00 43 AB 0D 25 A4 C5 01 00 FA A1 A3 9D 57 C4 ..C..%.. ......W. > [0F0] 01 00 FA A1 A3 9D 57 C4 01 00 00 00 00 00 00 00 ......W. ........ > [100] 00 00 00 00 00 00 00 00 00 11 00 00 00 14 00 00 ........ ........ > [110] 00 00 00 00 00 10 00 4C 00 32 00 49 00 38 00 31 .......L .2.I.8.1 > [120] 00 45 00 7E 00 41 00 00 00 00 00 00 00 00 00 6C .E.~.A.. .......l > [130] 00 6F 00 73 00 74 00 2B 00 66 00 6F 00 75 00 6E .o.s.t.+ .f.o.u.n > [140] 00 64 00 00 00 6C 00 00 00 00 00 00 00 00 74 C6 .d...l.. ......t. > [150] 9E 61 63 C4 01 00 43 AB 0D 25 A4 C5 01 00 74 C6 .ac...C. .%....t. > [160] 9E 61 63 C4 01 00 74 C6 9E 61 63 C4 01 00 00 00 .ac...t. .ac..... > [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 11 00 00 ........ ........ > [180] 00 0C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [1A0] 00 00 00 78 00 70 00 61 00 70 00 70 00 73 00 00 ...x.p.a .p.p.s.. > [1B0] 00 64 00 00 00 00 00 00 00 80 1F E3 BF 8E F5 C3 .d...... ........ > [1C0] 01 00 43 AB 0D 25 A4 C5 01 80 1F E3 BF 8E F5 C3 ..C..%.. ........ > [1D0] 01 80 1F E3 BF 8E F5 C3 01 00 00 00 00 00 00 00 ........ ........ > [1E0] 00 00 00 00 00 00 00 00 00 11 00 00 00 06 00 00 ........ ........ > [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ >[2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2findfirst(1828) > SMBtrans2 mask=* directory=./ dirtype=22 numentries=12 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 122 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x7a >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 11 of length 126 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=122 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19904 > smt_wct=15 > smb_vwv[ 0]= 54 (0x36) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 54 (0x36) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=57 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s > [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ > [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. > [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "lost+found/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [LOST+FOUND] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = lost+found/desktop.ini, dirpath = , start = lost+found/desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled lost+found/desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component lost+found/desktop.ini (len 10) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (20058bc8:sizeb) LOST+FOUND -> lost+found >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [lost+found/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19904 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 122 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x7a >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 12 of length 126 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=122 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19968 > smt_wct=15 > smb_vwv[ 0]= 54 (0x36) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 54 (0x36) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=57 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s > [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ > [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. > [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "lost+found/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = lost+found/desktop.ini, dirpath = lost+found, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [lost+found/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=19968 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 122 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x7a >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 13 of length 126 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=122 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20032 > smt_wct=15 > smb_vwv[ 0]= 54 (0x36) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 54 (0x36) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=57 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s > [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ > [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. > [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "lost+found/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = lost+found/desktop.ini, dirpath = lost+found, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [lost+found/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20032 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 14 of length 118 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20096 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 78 00 70 00 61 ........ .\.x.p.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "xpapps/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [XPAPPS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [XPAPPS] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = xpapps/desktop.ini, dirpath = , start = xpapps/desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled xpapps/desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component xpapps/desktop.ini (len 6) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (20058bc8:size7) XPAPPS -> xpapps >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [xpapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20096 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 15 of length 118 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20160 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 78 00 70 00 61 ........ .\.x.p.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "xpapps/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [XPAPPS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [XPAPPS] -> [xpapps] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = xpapps/desktop.ini, dirpath = xpapps, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [xpapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20160 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 16 of length 118 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20224 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 78 00 70 00 61 ........ .\.x.p.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "xpapps/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [XPAPPS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [XPAPPS] -> [xpapps] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = xpapps/desktop.ini, dirpath = xpapps, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [xpapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20224 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 108 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6c >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 17 of length 112 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20288 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=43 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s > [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p > [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "dos/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [DOS] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = dos/desktop.ini, dirpath = , start = dos/desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled dos/desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component dos/desktop.ini (len 3) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (20058c48:size4) DOS -> dos >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [dos/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20288 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 108 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6c >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 18 of length 112 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20352 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=43 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s > [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p > [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "dos/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [DOS] -> [dos] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = dos/desktop.ini, dirpath = dos, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [dos/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20352 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 108 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6c >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 19 of length 112 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20416 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=43 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s > [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p > [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "dos/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [DOS] -> [dos] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = dos/desktop.ini, dirpath = dos, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [dos/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20416 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 20 of length 118 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20480 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ntapps/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [NTAPPS] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = ntapps/desktop.ini, dirpath = , start = ntapps/desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled ntapps/desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component ntapps/desktop.ini (len 6) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (20058bc8:size7) NTAPPS -> ntapps >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ntapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20480 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 21 of length 118 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20544 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ntapps/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [NTAPPS] -> [ntapps] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = ntapps/desktop.ini, dirpath = ntapps, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ntapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20544 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 22 of length 118 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20608 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ntapps/desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [NTAPPS] -> [ntapps] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = ntapps/desktop.ini, dirpath = ntapps, start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ntapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20608 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 100 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x64 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 23 of length 104 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20672 > smt_wct=15 > smb_vwv[ 0]= 32 (0x20) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 32 (0x20) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=35 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 65 00 73 ........ .\.d.e.s > [010] 00 6B 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 .k.t.o.p ...i.n.i > [020] 00 00 00 ... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "desktop.ini" >[2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [DESKTOP.INI] >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = desktop.ini, dirpath = , start = desktop.ini >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) > reduce_name [desktop.ini] [/x04shr] >[2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [desktop.ini] -> [/x04shr/desktop.ini] >[2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: desktop.ini reduced to /x04shr/desktop.ini >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of desktop.ini failed (No such file or directory) >[2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20672 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 70 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x46 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 24 of length 74 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20737 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 03 01 ..... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfsinfo(2127) > call_trans2qfsinfo: level = 259 >[2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2qfsinfo(2268) > call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 >[2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 >[2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=80 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20737 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=25 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... > [010] 00 02 00 00 00 00 02 00 00 ........ . >[2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2qfsinfo(2425) > SMBtrans2 info_level = 259 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 248 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0xf8 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 25 of length 252 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=248 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=20800 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 248 (0xF8) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 87 (0x57) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=189 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 60 55 06 06 2B 06 01 05 05 02 A0 4B 30 49 A0 0E `U..+... ...K0I.. > [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 37 0...+... ..7....7 > [020] 04 35 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 B2 .5NTLMSS P....... > [030] 08 E0 06 00 06 00 2F 00 00 00 0F 00 0F 00 20 00 ....../. ...... . > [040] 00 00 48 55 44 53 4F 4E 2D 34 45 35 36 36 53 47 ..HUDSON -4E566SG > [050] 4B 4C 41 50 54 4F 50 57 00 69 00 6E 00 64 00 6F KLAPTOPW .i.n.d.o > [060] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. > [070] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. > [080] 00 50 00 61 00 63 00 6B 00 20 00 31 00 20 00 32 .P.a.c.k . .1. .2 > [090] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d > [0A0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 > [0B0] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 ..... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBsesssetupX (pid 17002) conn 0x0 >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) > wct=12 flg2=0xc807 >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) > Doing spnego session setup >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) > NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2005/08/18 16:01:20, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 102 >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_spnego_negotiate(480) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_spnego_negotiate(483) > Got secblob of size 53 >[2005/08/18 16:01:20, 5] auth/auth.c:make_auth_context_subsystem(482) > Making default auth method list for DC, security=user, encrypt passwords = yes >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match guest >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method guest has a valid init >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match sam >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method sam has a valid init >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match winbind:trustdomain >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match trustdomain >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method trustdomain has a valid init >[2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method winbind has a valid init >[2005/08/18 16:01:20, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) > Got NTLMSSP neg_flags=0xe008b297 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_NEGOTIATE_OEM > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_LM_KEY > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED > NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module guest did not want to specify a challenge >[2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module sam did not want to specify a challenge >[2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module winbind did not want to specify a challenge >[2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(135) > auth_context challenge created by random >[2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(136) > challenge is: >[2005/08/18 16:01:20, 5] lib/util.c:dump_data(2053) > [000] A8 A9 68 40 8E DF 33 EB ..h@..3. >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=274 > smb_com=0x73 > smb_rcls=22 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=102 > smb_mid=20800 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 177 (0xB1) > smb_bcc=231 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] A1 81 AE 30 81 AB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ > [010] 06 01 04 01 82 37 02 02 0A A2 81 95 04 81 92 4E .....7.. .......N > [020] 54 4C 4D 53 53 50 00 02 00 00 00 0A 00 0A 00 30 TLMSSP.. .......0 > [030] 00 00 00 95 82 89 60 A8 A9 68 40 8E DF 33 EB 00 ......`. .h@..3.. > [040] 00 00 00 00 00 00 00 58 00 58 00 3A 00 00 00 41 .......X .X.:...A > [050] 00 43 00 44 00 45 00 56 00 02 00 0A 00 41 00 43 .C.D.E.V .....A.C > [060] 00 44 00 45 00 56 00 01 00 0C 00 41 00 43 00 45 .D.E.V.. ...A.C.E > [070] 00 44 00 45 00 56 00 04 00 10 00 68 00 76 00 63 .D.E.V.. ...h.v.c > [080] 00 63 00 2E 00 65 00 64 00 75 00 03 00 1E 00 61 .c...e.d .u.....a > [090] 00 63 00 65 00 64 00 65 00 76 00 2E 00 68 00 76 .c.e.d.e .v...h.v > [0A0] 00 63 00 63 00 2E 00 65 00 64 00 75 00 00 00 00 .c.c...e .d.u.... > [0B0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m > [0C0] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2 > [0D0] 00 30 00 72 00 63 00 32 00 00 00 41 00 43 00 44 .0.r.c.2 ...A.C.D > [0E0] 00 45 00 56 00 00 00 .E.V... >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 280 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x118 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 26 of length 284 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=280 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=102 > smb_mid=20864 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 280 (0x118) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 119 (0x77) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=221 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] A1 75 30 73 A2 71 04 6F 4E 54 4C 4D 53 53 50 00 .u0s.q.o NTLMSSP. > [010] 03 00 00 00 01 00 01 00 5E 00 00 00 00 00 00 00 ........ ^....... > [020] 5F 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 _....... @....... > [030] 40 00 00 00 1E 00 1E 00 40 00 00 00 10 00 10 00 @....... @....... > [040] 5F 00 00 00 15 8A 88 60 48 00 55 00 44 00 53 00 _......` H.U.D.S. > [050] 4F 00 4E 00 2D 00 34 00 45 00 35 00 36 00 36 00 O.N.-.4. E.5.6.6. > [060] 53 00 47 00 4B 00 00 86 9F C0 94 C6 95 D3 27 B7 S.G.K... ......'. > [070] 85 14 AC 56 AE 58 A3 57 00 69 00 6E 00 64 00 6F ...V.X.W .i.n.d.o > [080] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. > [090] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. > [0A0] 00 50 00 61 00 63 00 6B 00 20 00 31 00 20 00 32 .P.a.c.k . .1. .2 > [0B0] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d > [0C0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 > [0D0] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 ..... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBsesssetupX (pid 17002) conn 0x0 >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) > wct=12 flg2=0xc807 >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) > Doing spnego session setup >[2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) > NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2005/08/18 16:01:20, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) > Got user=[] domain=[] workstation=[HUDSON-4E566SGK] len1=1 len2=0 >[2005/08/18 16:01:20, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info_map(191) > make_user_info_map: Mapping user []\[] from workstation [HUDSON-4E566SGK] >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:20, 3] smbd/uid.c:push_conn_ctx(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:20, 5] auth/auth_util.c:is_trusted_domain(1541) > is_trusted_domain: Checking for domain trust with [ACDEV] >[2005/08/18 16:01:20, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(325) > secrets_fetch failed! >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 10] lib/gencache.c:gencache_get(285) > Cache entry with key = TDOM/ACDEV couldn't be found >[2005/08/18 16:01:20, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) > no entry for trusted domain ACDEV found. >[2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info(99) > attempting to make a user_info for () >[2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info(109) > making strings for 's user_info struct >[2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info(151) > making blobs for 's user_info struct >[2005/08/18 16:01:20, 10] auth/auth_util.c:make_user_info(167) > made an encrypted user_info for () >[2005/08/18 16:01:20, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking password for unmapped user []\[]@[HUDSON-4E566SGK] with the new password interface >[2005/08/18 16:01:20, 3] auth/auth.c:check_ntlm_password(222) > check_ntlm_password: mapped user is: [ACDEV]\[]@[HUDSON-4E566SGK] >[2005/08/18 16:01:20, 10] auth/auth.c:check_ntlm_password(231) > check_ntlm_password: auth_context challenge created by random >[2005/08/18 16:01:20, 10] auth/auth.c:check_ntlm_password(233) > challenge is: >[2005/08/18 16:01:20, 5] lib/util.c:dump_data(2053) > [000] A8 A9 68 40 8E DF 33 EB ..h@..3. >[2005/08/18 16:01:20, 10] lib/account_pol.c:account_policy_get(202) > account_policy_get: password history:0 >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_username(617) > pdb_set_username: setting username nobody, was >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_domain(644) > pdb_set_domain: setting domain ACDEV, was >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) > pdb_set_nt_username: setting nt username nobody, was >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) > pdb_set_full_name: setting full name nobody,Special Id, was >[2005/08/18 16:01:20, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) > pdb_set_homedir: setting home dir \\acedev\nobody, was >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) > pdb_set_dir_drive: setting dir drive h:, was NULL >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) > pdb_set_logon_script: setting logon script hudson-4e566sgk.bat, was >[2005/08/18 16:01:20, 4] lib/substitute.c:automount_server(337) > Home server: acedev >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) > pdb_set_profile_path: setting profile path \\acedev\nobody\profile, was >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_workstations(885) > pdb_set_workstations: setting workstations , was >[2005/08/18 16:01:20, 10] lib/account_pol.c:account_policy_get(202) > account_policy_get: password history:0 >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) > pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 >[2005/08/18 16:01:20, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 from rid 501 >[2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) > pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 >[2005/08/18 16:01:20, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) > pdb_set_group_sid_from_rid: > setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 from rid 514 >[2005/08/18 16:01:20, 3] auth/auth.c:check_ntlm_password(268) > check_ntlm_password: guest authentication for user [] succeeded >[2005/08/18 16:01:20, 5] auth/auth.c:check_ntlm_password(307) > check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded >[2005/08/18 16:01:20, 5] auth/auth_util.c:free_user_info(1361) > attempting to free (and zero) a user_info structure >[2005/08/18 16:01:20, 10] auth/auth_util.c:free_user_info(1364) > structure was created for >[2005/08/18 16:01:20, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) > Got NT session key of length 16 >[2005/08/18 16:01:20, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) > Got LM session key of length 16 >[2005/08/18 16:01:20, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(696) > ntlmssp_server_auth: Using unmodified nt session key. >[2005/08/18 16:01:20, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) > NTLMSSP Sign/Seal - Initialising with flags: >[2005/08/18 16:01:20, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) > Got NTLMSSP neg_flags=0x60088215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2005/08/18 16:01:20, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 103 >[2005/08/18 16:01:20, 10] lib/util_pw.c:getpwnam_alloc(98) > Got nobody from pwnam_cache >[2005/08/18 16:01:20, 10] smbd/password.c:register_vuid(255) > register_vuid: (4294967294,4294967294) nobody ACDEV guest=1 >[2005/08/18 16:01:20, 3] smbd/password.c:register_vuid(257) > User name: nobody Real name: nobody,Special Id >[2005/08/18 16:01:20, 3] smbd/password.c:register_vuid(276) > UNIX uid -2 is UNIX user nobody, and will be vuid 103 >[2005/08/18 16:01:20, 6] param/loadparm.c:lp_file_list_changed(2834) > lp_file_list_changed() > file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 > >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=106 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=103 > smb_mid=20864 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 9 (0x9) > smb_bcc=63 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x > [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 > [020] 00 2E 00 30 00 2E 00 32 00 30 00 72 00 63 00 32 ...0...2 .0.r.c.2 > [030] 00 00 00 41 00 43 00 44 00 45 00 56 00 00 00 ...A.C.D .E.V... >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 70 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x46 >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 27 of length 74 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20929 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 03 01 ..... >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 > contains 5 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 3476 > Primary group is 206 and contains 1 supplementary groups > Group[ 0]: 206 >[2005/08/18 16:01:20, 5] smbd/uid.c:change_to_user(304) > change_to_user uid=(0,3476) gid=(0,206) >[2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfsinfo(2127) > call_trans2qfsinfo: level = 259 >[2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2qfsinfo(2268) > call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 >[2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 >[2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=80 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=20929 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=25 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... > [010] 00 02 00 00 00 00 02 00 00 ........ . >[2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2qfsinfo(2425) > SMBtrans2 info_level = 259 >[2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 78 >[2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x4e >[2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) > Transaction 28 of length 82 >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=78 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=103 > smb_mid=20992 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 78 (0x4E) > smb_vwv[ 2]= 8 (0x8) > smb_vwv[ 3]= 1 (0x1) > smb_bcc=35 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 5C 00 41 00 43 00 45 00 44 00 45 00 56 .\.\.A.C .E.D.E.V > [010] 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F .\.I.P.C .$...??? > [020] 3F 3F 00 ??. >[2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) > switch message SMBtconX (pid 17002) conn 0x0 >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:20, 4] smbd/reply.c:reply_tcon_and_X(618) > Client requested device type [?????] for share [IPC$] >[2005/08/18 16:01:20, 5] smbd/service.c:make_connection(811) > making a connection to 'normal' service ipc$ >[2005/08/18 16:01:20, 3] lib/access.c:check_access(313) > check_access: no hostnames in host allow/deny list. >[2005/08/18 16:01:20, 2] lib/access.c:check_access(324) > Allowed connection from (151.103.17.49) >[2005/08/18 16:01:20, 5] lib/username.c:Get_Pwnam_alloc(313) > Finding user nobody >[2005/08/18 16:01:20, 5] lib/username.c:Get_Pwnam_internals(262) > Trying _Get_Pwnam(), username as lowercase is nobody >[2005/08/18 16:01:20, 10] lib/util_pw.c:getpwnam_alloc(98) > Got nobody from pwnam_cache >[2005/08/18 16:01:20, 5] lib/username.c:Get_Pwnam_internals(290) > Get_Pwnam_internals did find user [nobody]! >[2005/08/18 16:01:20, 3] smbd/service.c:make_connection_snum(477) > Connect path is '/tmp' for service [IPC$] >[2005/08/18 16:01:20, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) > get_share_security: using default secdesc for IPC$ >[2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-501. >[2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(250) >[2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-501 > se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-514 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-32-546 > se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-997 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 >[2005/08/18 16:01:20, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (2) granted. >[2005/08/18 16:01:20, 3] smbd/vfs.c:vfs_init_default(215) > Initialising default vfs hooks >[2005/08/18 16:01:20, 5] smbd/connection.c:claim_connection(170) > claiming IPC$ 0 >[2005/08/18 16:01:20, 10] smbd/uid.c:is_share_read_only_for_user(122) > is_share_read_only_for_user: share IPC$ is read-only for unix user nobody >[2005/08/18 16:01:20, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) > get_share_security: using default secdesc for IPC$ >[2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-501. >[2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(250) >[2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-501 > se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-514 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-32-546 > se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-997 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 >[2005/08/18 16:01:20, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (1) granted. >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (4294967294, 4294967294) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-501 > contains 6 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-501 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-514 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > SID[ 5]: S-1-5-21-1908802895-3536710745-1580887524-997 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user -2 > Primary group is -2 and contains 1 supplementary groups > Group[ 0]: -2 >[2005/08/18 16:01:20, 5] smbd/uid.c:change_to_user(304) > change_to_user uid=(0,-2) gid=(0,-2) >[2005/08/18 16:01:20, 3] smbd/service.c:make_connection_snum(662) > hudson-4e566sgk (151.103.17.49) connect to service IPC$ initially as user nobody (uid=-2, gid=-2) (pid 17002) >[2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:20, 3] smbd/reply.c:reply_tcon_and_X(666) > tconX service=IPC$ >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=2 > smb_pid=65279 > smb_uid=103 > smb_mid=20992 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 13 (0xD) > smb_bcc=7 >[2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) > [000] 49 50 43 00 00 00 00 IPC.... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 86 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x56 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 29 of length 90 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=86 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21056 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=3 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:21, 5] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 > contains 5 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:21, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 3476 > Primary group is 206 and contains 1 supplementary groups > Group[ 0]: 206 >[2005/08/18 16:01:21, 5] smbd/uid.c:change_to_user(304) > change_to_user uid=(0,3476) gid=(0,206) >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 root_dir_fid = 0x0 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [.] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [.] -> [/x04shr] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: . reduced to /x04shr >[2005/08/18 16:01:21, 5] smbd/open.c:open_directory(1935) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x1, create_disposition = 0x1 >[2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) > allocated file structure 4515, fnum = 8611 (1 used) >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: . >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8611, open name = . >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21056 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=41728 (0xA300) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=16974 (0x424E) > smb_vwv[ 7]= 9306 (0x245A) > smb_vwv[ 8]=50596 (0xC5A4) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=49768 (0xC268) > smb_vwv[11]=12185 (0x2F99) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=16974 (0x424E) > smb_vwv[15]= 9306 (0x245A) > smb_vwv[16]=50596 (0xC5A4) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=16974 (0x424E) > smb_vwv[19]= 9306 (0x245A) > smb_vwv[20]=50596 (0xC5A4) > smb_vwv[21]= 4353 (0x1101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 84 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x54 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 30 of length 88 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21120 > smt_wct=23 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 8192 (0x2000) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=21504 (0x5400) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 1024 (0x400) > smb_vwv[18]= 4 (0x4) > smb_vwv[19]= 23 (0x17) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 8611 (0x21A3) > smb_vwv[22]= 1 (0x1) > smb_bcc=3 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBnttrans (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_nttrans(2815) > reply_nttrans: setup_count = 8 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 17 00 00 00 A3 21 01 00 .....!.. >[2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1848) > call_nt_transact_notify_change >[2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1863) > call_nt_transact_notify_change: notify change called on directory name = . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 88 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x58 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 31 of length 92 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21185 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 00 00 .\... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 root_dir_fid = 0x0 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [.] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [.] -> [/x04shr] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: . reduced to /x04shr >[2005/08/18 16:01:21, 5] smbd/open.c:open_directory(1935) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x1, create_disposition = 0x1 >[2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) > allocated file structure 4516, fnum = 8612 (2 used) >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: . >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning rd >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning rd >[2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8612, open name = . >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21185 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=41984 (0xA400) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=16974 (0x424E) > smb_vwv[ 7]= 9306 (0x245A) > smb_vwv[ 8]=50596 (0xC5A4) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=23294 (0x5AFE) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=16974 (0x424E) > smb_vwv[15]= 9306 (0x245A) > smb_vwv[16]=50596 (0xC5A4) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=16974 (0x424E) > smb_vwv[19]= 9306 (0x245A) > smb_vwv[20]=50596 (0xC5A4) > smb_vwv[21]= 4353 (0x1101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 84 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x54 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 32 of length 88 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21249 > smt_wct=23 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 8192 (0x2000) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=21504 (0x5400) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 1024 (0x400) > smb_vwv[18]= 4 (0x4) > smb_vwv[19]= 23 (0x17) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 8612 (0x21A4) > smb_vwv[22]= 0 (0x0) > smb_bcc=3 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBnttrans (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_nttrans(2815) > reply_nttrans: setup_count = 8 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 17 00 00 00 A4 21 00 00 .....!.. >[2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1848) > call_nt_transact_notify_change >[2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1863) > call_nt_transact_notify_change: notify change called on directory name = . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 96 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x60 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 33 of length 100 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21314 > smt_wct=15 > smb_vwv[ 0]= 28 (0x1C) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 28 (0x1C) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=31 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 67 00 68 00 6F ........ .\.g.h.o > [010] 00 73 00 74 00 2E 00 65 00 78 00 65 00 00 00 .s.t...e .x.e... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost.exe" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [GHOST.EXE] >[2005/08/18 16:01:21, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (20067328:sizea) GHOST.EXE -> ghost.exe >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(170) > conversion finished ghost.exe -> ghost.exe >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = -1) level=257 call=5 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 08:05:59 2005 > access: Thu Aug 18 14:45:50 2005 > write: Thu Aug 18 08:05:59 2005 > change: Thu Aug 18 08:05:59 2005 > mode: 1 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21314 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 2D EB 31 ED A3 C5 01 00 43 AB ......-. 1.....C. > [010] 0D 25 A4 C5 01 80 2D EB 31 ED A3 C5 01 80 2D EB .%....-. 1.....-. > [020] 31 ED A3 C5 01 01 00 00 00 1....... . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 106 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6a >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 34 of length 110 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=106 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21378 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5120 (0x1400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 8 (0x8) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=23 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e > [010] 00 78 00 65 00 00 00 .x.e... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost.exe" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost.exe) returning 0744 >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20189 >[2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) > allocated file structure 4517, fnum = 8613 (3 used) >[2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) > fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) > billtest opened file ghost.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8613, open name = ghost.exe >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21378 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=42240 (0xA500) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=60205 (0xEB2D) > smb_vwv[ 7]=60721 (0xED31) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=43843 (0xAB43) > smb_vwv[11]= 9485 (0x250D) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=60205 (0xEB2D) > smb_vwv[15]=60721 (0xED31) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=60205 (0xEB2D) > smb_vwv[19]=60721 (0xED31) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 8192 (0x2000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 9216 (0x2400) > smb_vwv[28]= 5446 (0x1546) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 35 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21442 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A5 21 01 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8613) level=257 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 08:05:59 2005 > access: Thu Aug 18 14:45:50 2005 > write: Thu Aug 18 08:05:59 2005 > change: Thu Aug 18 08:05:59 2005 > mode: 1 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21442 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 2D EB 31 ED A3 C5 01 00 43 AB ......-. 1.....C. > [010] 0D 25 A4 C5 01 80 2D EB 31 ED A3 C5 01 80 2D EB .%....-. 1.....-. > [020] 31 ED A3 C5 01 01 00 00 00 1....... . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 116 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x74 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 36 of length 120 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21506 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A5 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ > [010] 00 00 00 00 43 AB 0D 25 A4 C5 01 00 00 00 00 00 ....C..% ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) > call_trans2setfilepathinfo(8) ghost.exe (fnum 8613) info_level=257 totdata=40 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) > actime: Thu Aug 18 14:45:50 2005 > modtime: Thu Aug 18 08:05:59 2005 > size: 1394212 dosmode: 0 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=58 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21506 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=3 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 ... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 37 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=21570 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8613 (0x21A5) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 12 (0xC) > smb_vwv[ 6]= 12 (0xC) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 12 (0xC) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=12 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 0, count = 12, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 12 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=12 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8613 max=12 nread=75 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 38 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21634 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A5 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8613) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21634 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 39 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21698 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A5 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8613) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21698 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 40 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=21762 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8613 (0x21A5) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8613 max=16580 nread=16643 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 41 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=21762 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8613 (0x21A5) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8613 max=16188 nread=16251 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 42 of length 45 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=21826 > smt_wct=3 > smb_vwv[ 0]= 8613 (0x21A5) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8613 (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:21, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost.exe has no outstanding locks. >[2005/08/18 16:01:21, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost.exe (numopen=2) >[2005/08/18 16:01:21, 5] smbd/files.c:file_free(459) > freed files structure 8613 (2 used) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=21826 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 106 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6a >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 43 of length 110 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=106 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21890 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5120 (0x1400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 8 (0x8) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=23 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e > [010] 00 78 00 65 00 00 00 .x.e... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost.exe" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost.exe) returning 0744 >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20189 >[2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) > allocated file structure 4518, fnum = 8614 (3 used) >[2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) > fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) > billtest opened file ghost.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8614, open name = ghost.exe >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21890 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=42496 (0xA600) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=60205 (0xEB2D) > smb_vwv[ 7]=60721 (0xED31) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=23294 (0x5AFE) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=60205 (0xEB2D) > smb_vwv[15]=60721 (0xED31) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=60205 (0xEB2D) > smb_vwv[19]=60721 (0xED31) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 8192 (0x2000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 9216 (0x2400) > smb_vwv[28]= 5446 (0x1546) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 44 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21954 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A6 21 01 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8614) level=257 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 08:05:59 2005 > access: Thu Aug 18 16:01:21 2005 > write: Thu Aug 18 08:05:59 2005 > change: Thu Aug 18 08:05:59 2005 > mode: 1 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=21954 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 2D EB 31 ED A3 C5 01 80 FE 5A ......-. 1......Z > [010] 9A 2F A4 C5 01 80 2D EB 31 ED A3 C5 01 80 2D EB ./....-. 1.....-. > [020] 31 ED A3 C5 01 01 00 00 00 1....... . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 116 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x74 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 45 of length 120 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22018 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A6 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ > [010] 00 00 00 80 FE 5A 9A 2F A4 C5 01 00 00 00 00 00 .....Z./ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) > call_trans2setfilepathinfo(8) ghost.exe (fnum 8614) info_level=257 totdata=40 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) > actime: Thu Aug 18 16:01:21 2005 > modtime: Thu Aug 18 08:05:59 2005 > size: 1394212 dosmode: 0 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=58 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22018 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=3 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 ... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 46 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22082 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8614 (0x21A6) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 12 (0xC) > smb_vwv[ 6]= 12 (0xC) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 12 (0xC) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=12 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 0, count = 12, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 12 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=12 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8614 max=12 nread=75 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 47 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22146 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A6 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8614) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22146 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 48 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22210 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A6 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8614) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22210 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 49 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22274 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8614 (0x21A6) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8614 max=16580 nread=16643 >[2005/08/18 16:01:21, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:21, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:21, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:21, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 50 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22274 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8614 (0x21A6) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:21, 5] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 > contains 5 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:21, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 3476 > Primary group is 206 and contains 1 supplementary groups > Group[ 0]: 206 >[2005/08/18 16:01:21, 5] smbd/uid.c:change_to_user(304) > change_to_user uid=(0,3476) gid=(0,206) >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8614 max=16188 nread=16251 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 51 of length 45 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22338 > smt_wct=3 > smb_vwv[ 0]= 8614 (0x21A6) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8614 (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:21, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost.exe >[2005/08/18 16:01:21, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost.exe has no outstanding locks. >[2005/08/18 16:01:21, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost.exe (numopen=2) >[2005/08/18 16:01:21, 5] smbd/files.c:file_free(459) > freed files structure 8614 (2 used) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22338 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 100 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x64 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 52 of length 104 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22402 > smt_wct=15 > smb_vwv[ 0]= 32 (0x20) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 32 (0x20) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=35 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 67 00 68 00 6F ........ .\.g.h.o > [010] 00 73 00 74 00 37 00 35 00 2E 00 65 00 78 00 65 .s.t.7.5 ...e.x.e > [020] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost75.exe" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [GHOST75.EXE] >[2005/08/18 16:01:21, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (20067178:sizec) GHOST75.EXE -> ghost75.exe >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(170) > conversion finished ghost75.exe -> ghost75.exe >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = -1) level=257 call=5 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 08:07:18 2005 > access: Thu Aug 18 14:45:50 2005 > write: Thu Aug 18 08:07:18 2005 > change: Thu Aug 18 08:07:18 2005 > mode: 1 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22402 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 9F 01 61 ED A3 C5 01 00 43 AB ........ a.....C. > [010] 0D 25 A4 C5 01 00 9F 01 61 ED A3 C5 01 00 9F 01 .%...... a....... > [020] 61 ED A3 C5 01 01 00 00 00 a....... . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 110 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6e >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 53 of length 114 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=110 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22466 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6144 (0x1800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 8 (0x8) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=27 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 37 00 35 .\.g.h.o .s.t.7.5 > [010] 00 2E 00 65 00 78 00 65 00 00 00 ...e.x.e ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost75.exe" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST75.EXE] -> [ghost75.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost75.exe) returning 0744 >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20189 >[2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) > allocated file structure 4519, fnum = 8615 (3 used) >[2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) > fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) > billtest opened file ghost75.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8615, open name = ghost75.exe >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22466 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=42752 (0xA700) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 415 (0x19F) > smb_vwv[ 7]=60769 (0xED61) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=43843 (0xAB43) > smb_vwv[11]= 9485 (0x250D) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 415 (0x19F) > smb_vwv[15]=60769 (0xED61) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 415 (0x19F) > smb_vwv[19]=60769 (0xED61) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]=15360 (0x3C00) > smb_vwv[28]= 2643 (0xA53) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 54 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22530 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A7 21 01 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8615) level=257 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 08:07:18 2005 > access: Thu Aug 18 14:45:50 2005 > write: Thu Aug 18 08:07:18 2005 > change: Thu Aug 18 08:07:18 2005 > mode: 1 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22530 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 9F 01 61 ED A3 C5 01 00 43 AB ........ a.....C. > [010] 0D 25 A4 C5 01 00 9F 01 61 ED A3 C5 01 00 9F 01 .%...... a....... > [020] 61 ED A3 C5 01 01 00 00 00 a....... . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 116 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x74 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 55 of length 120 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22594 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A7 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ > [010] 00 00 00 00 43 AB 0D 25 A4 C5 01 00 00 00 00 00 ....C..% ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) > call_trans2setfilepathinfo(8) ghost75.exe (fnum 8615) info_level=257 totdata=40 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) > actime: Thu Aug 18 14:45:50 2005 > modtime: Thu Aug 18 08:07:18 2005 > size: 676668 dosmode: 0 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=58 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22594 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=3 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 ... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 56 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22658 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8615 (0x21A7) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 12 (0xC) > smb_vwv[ 6]= 12 (0xC) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 12 (0xC) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=12 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 0, count = 12, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 12 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=12 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8615 max=12 nread=75 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 57 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22722 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A7 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8615) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22722 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ .....<S. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 58 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22786 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A7 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8615) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22786 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ .....<S. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 59 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22850 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8615 (0x21A7) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8615 max=16580 nread=16643 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 60 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22850 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8615 (0x21A7) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8615 max=16188 nread=16251 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 61 of length 45 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22914 > smt_wct=3 > smb_vwv[ 0]= 8615 (0x21A7) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8615 (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:21, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost75.exe has no outstanding locks. >[2005/08/18 16:01:21, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost75.exe (numopen=2) >[2005/08/18 16:01:21, 5] smbd/files.c:file_free(459) > freed files structure 8615 (2 used) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=22914 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 110 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6e >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 62 of length 114 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=110 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22978 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6144 (0x1800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 8 (0x8) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=27 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 37 00 35 .\.g.h.o .s.t.7.5 > [010] 00 2E 00 65 00 78 00 65 00 00 00 ...e.x.e ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost75.exe" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST75.EXE] -> [ghost75.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost75.exe) returning 0744 >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20189 >[2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) > allocated file structure 4520, fnum = 8616 (3 used) >[2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) > fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) > billtest opened file ghost75.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8616, open name = ghost75.exe >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=22978 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=43008 (0xA800) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 415 (0x19F) > smb_vwv[ 7]=60769 (0xED61) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=23294 (0x5AFE) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 415 (0x19F) > smb_vwv[15]=60769 (0xED61) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 415 (0x19F) > smb_vwv[19]=60769 (0xED61) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]=15360 (0x3C00) > smb_vwv[28]= 2643 (0xA53) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 63 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23042 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A8 21 01 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8616) level=257 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 08:07:18 2005 > access: Thu Aug 18 16:01:21 2005 > write: Thu Aug 18 08:07:18 2005 > change: Thu Aug 18 08:07:18 2005 > mode: 1 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23042 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 9F 01 61 ED A3 C5 01 80 FE 5A ........ a......Z > [010] 9A 2F A4 C5 01 00 9F 01 61 ED A3 C5 01 00 9F 01 ./...... a....... > [020] 61 ED A3 C5 01 01 00 00 00 a....... . >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 116 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x74 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 64 of length 120 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23106 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A8 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ > [010] 00 00 00 80 FE 5A 9A 2F A4 C5 01 00 00 00 00 00 .....Z./ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) > call_trans2setfilepathinfo(8) ghost75.exe (fnum 8616) info_level=257 totdata=40 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) > actime: Thu Aug 18 16:01:21 2005 > modtime: Thu Aug 18 08:07:18 2005 > size: 676668 dosmode: 0 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=58 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23106 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=3 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 ... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 65 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23170 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8616 (0x21A8) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 12 (0xC) > smb_vwv[ 6]= 12 (0xC) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 12 (0xC) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=12 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 0, count = 12, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 12 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 12 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=12 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8616 max=12 nread=75 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 66 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23234 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A8 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8616) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23234 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ .....<S. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 67 of length 76 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23298 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A8 21 02 01 ....!.. >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8616) level=258 call=7 total_data=0 >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23298 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ .....<S. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 68 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23362 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8616 (0x21A8) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8616 max=16580 nread=16643 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 69 of length 63 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23362 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8616 (0x21A8) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8616 max=16188 nread=16251 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 70 of length 45 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23426 > smt_wct=3 > smb_vwv[ 0]= 8616 (0x21A8) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8616 (numopen=3) >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:21, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost75.exe >[2005/08/18 16:01:21, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost75.exe has no outstanding locks. >[2005/08/18 16:01:21, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost75.exe (numopen=2) >[2005/08/18 16:01:21, 5] smbd/files.c:file_free(459) > freed files structure 8616 (2 used) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23426 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 71 of length 118 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23490 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 78 00 70 00 61 ........ .\.x.p.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "xpapps/desktop.ini" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [XPAPPS/DESKTOP.INI] >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [XPAPPS] -> [xpapps] >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = xpapps/desktop.ini, dirpath = xpapps, start = desktop.ini >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [xpapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23490 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 72 of length 118 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23554 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a > [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k > [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. > [030] 00 . >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ntapps/desktop.ini" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [NTAPPS] -> [ntapps] >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = ntapps/desktop.ini, dirpath = ntapps, start = desktop.ini >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ntapps/desktop.ini] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23554 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 122 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x7a >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 73 of length 126 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=122 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23618 > smt_wct=15 > smb_vwv[ 0]= 54 (0x36) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 54 (0x36) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=57 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s > [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ > [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. > [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "lost+found/desktop.ini" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = lost+found/desktop.ini, dirpath = lost+found, start = desktop.ini >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [lost+found/desktop.ini] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23618 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 108 >[2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6c >[2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) > Transaction 74 of length 112 >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23682 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=43 >[2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s > [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p > [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... >[2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "dos/desktop.ini" >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] >[2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [DOS] -> [dos] >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) > unix_convert begin: name = dos/desktop.ini, dirpath = dos, start = desktop.ini >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled desktop.ini ? >[2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component desktop.ini (len 11) ? >[2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) > New file desktop.ini >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) > reduce_name [dos/desktop.ini] [/x04shr] >[2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] >[2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini >[2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) > call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) >[2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) > set_bad_path_error: err = 2 bad_path = 0 >[2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) > error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23682 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 106 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6a >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 75 of length 110 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=106 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23746 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5120 (0x1400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 8192 (0x2000) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1280 (0x500) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=23 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 6C 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 l\.g.h.o .s.t...e > [010] 00 78 00 65 00 00 00 .x.e... >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost.exe" >[2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost.exe) returning 0744 >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost.exe, dos_attrs=0x0 access_mask=0x20 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20 >[2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) > allocated file structure 4521, fnum = 8617 (3 used) >[2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) > fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) > billtest opened file ghost.exe read=No write=No (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 7, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8617, open name = ghost.exe >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23746 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=43264 (0xA900) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=60205 (0xEB2D) > smb_vwv[ 7]=60721 (0xED31) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=23294 (0x5AFE) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=60205 (0xEB2D) > smb_vwv[15]=60721 (0xED31) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=60205 (0xEB2D) > smb_vwv[19]=60721 (0xED31) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 8192 (0x2000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 9216 (0x2400) > smb_vwv[28]= 5446 (0x1546) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 76 of length 76 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23810 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 A9 21 02 01 ....!.. >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 7, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8617) level=258 call=7 total_data=0 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=23810 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 77 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23874 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8617 max=16580 nread=16643 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 78 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23874 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8617 max=16188 nread=16251 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 79 of length 45 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23938 > smt_wct=3 > smb_vwv[ 0]= 8617 (0x21A9) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8617 (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 7, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost.exe has no outstanding locks. >[2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost.exe (numopen=2) >[2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) > freed files structure 8617 (2 used) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=23938 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 106 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6a >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 80 of length 110 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=106 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24002 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5120 (0x1400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1280 (0x500) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=23 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e > [010] 00 78 00 65 00 00 00 .x.e... >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost.exe" >[2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost.exe) returning 0744 >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost.exe, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20089 >[2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) > allocated file structure 4522, fnum = 8618 (3 used) >[2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) > fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) > billtest opened file ghost.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 8, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8618, open name = ghost.exe >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24002 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=43520 (0xAA00) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=60205 (0xEB2D) > smb_vwv[ 7]=60721 (0xED31) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62357 (0xF395) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=60205 (0xEB2D) > smb_vwv[15]=60721 (0xED31) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=60205 (0xEB2D) > smb_vwv[19]=60721 (0xED31) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 8192 (0x2000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 9216 (0x2400) > smb_vwv[28]= 5446 (0x1546) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 81 of length 76 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24066 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 AA 21 02 01 ....!.. >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 8, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost.exe (fnum = 8618) level=258 call=7 total_data=0 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24066 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 82 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24130 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8618 (0x21AA) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8618 max=16580 nread=16643 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 83 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24130 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8618 (0x21AA) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8618 max=16188 nread=16251 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 84 of length 45 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24194 > smt_wct=3 > smb_vwv[ 0]= 8618 (0x21AA) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8618 (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 8, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost.exe has no outstanding locks. >[2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost.exe (numopen=2) >[2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) > freed files structure 8618 (2 used) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24194 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 106 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6a >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 85 of length 110 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=106 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24258 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5120 (0x1400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=23 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e > [010] 00 78 00 65 00 00 00 .x.e... >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost.exe" >[2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost.exe) returning 0744 >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost.exe, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost.exe reduced to /x04shr/ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20089 >[2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) > allocated file structure 4523, fnum = 8619 (3 used) >[2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) > fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) > billtest opened file ghost.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 9, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8619, open name = ghost.exe >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24258 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=43776 (0xAB00) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=60205 (0xEB2D) > smb_vwv[ 7]=60721 (0xED31) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62357 (0xF395) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=60205 (0xEB2D) > smb_vwv[15]=60721 (0xED31) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=60205 (0xEB2D) > smb_vwv[19]=60721 (0xED31) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 8192 (0x2000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 9216 (0x2400) > smb_vwv[28]= 5446 (0x1546) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 86 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24322 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8619 (0x21AB) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 2 (0x2) > smb_vwv[ 6]= 2 (0x2) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=2 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 0, count = 2, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 2 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 2 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 2 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=2 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (2) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8619 max=2 nread=65 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 87 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24386 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8619 (0x21AB) > smb_vwv[ 3]= 60 (0x3C) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4 (0x4) > smb_vwv[ 6]= 4 (0x4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=60 len=4 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 60, count = 4, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 60, count_out = 4 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 60 4 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 60 4 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=60 len=4 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (4) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8619 max=4 nread=67 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 88 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24450 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8619 (0x21AB) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 240 (0xF0) > smb_vwv[ 5]= 64 (0x40) > smb_vwv[ 6]= 64 (0x40) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 64 (0x40) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=15728640 len=64 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost.exe, offset = 15728640, count = 64, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 15728640, count_out = 64 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 15728640 64 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 15728640 64 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=15728640 len=64 unlocked for file ghost.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (64) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 10] smbd/fileio.c:read_file(105) > read_file (ghost.exe): pos = 15728640, size = 64, returned 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2585) > send_file_readX fnum=8619 max=64 nread=0 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24450 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=65535 (0xFFFF) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 59 (0x3B) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 89 of length 45 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24514 > smt_wct=3 > smb_vwv[ 0]= 8619 (0x21AB) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8619 (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 9, dev = 0x1e0001, inode = 19 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost.exe >[2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost.exe has no outstanding locks. >[2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost.exe (numopen=2) >[2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) > freed files structure 8619 (2 used) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24514 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 110 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6e >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 90 of length 114 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=110 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24578 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6144 (0x1800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 8192 (0x2000) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1280 (0x500) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=27 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 37 00 35 .\.g.h.o .s.t.7.5 > [010] 00 2E 00 65 00 78 00 65 00 00 00 ...e.x.e ... >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost75.exe" >[2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST75.EXE] -> [ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost75.exe) returning 0744 >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x0 access_mask=0x20 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20 >[2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) > allocated file structure 4524, fnum = 8620 (3 used) >[2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) > fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) > billtest opened file ghost75.exe read=No write=No (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 10, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8620, open name = ghost75.exe >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24578 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=44032 (0xAC00) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 415 (0x19F) > smb_vwv[ 7]=60769 (0xED61) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=23294 (0x5AFE) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 415 (0x19F) > smb_vwv[15]=60769 (0xED61) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 415 (0x19F) > smb_vwv[19]=60769 (0xED61) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]=15360 (0x3C00) > smb_vwv[28]= 2643 (0xA53) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 91 of length 76 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24642 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 AC 21 02 01 ....!.. >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 10, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8620) level=258 call=7 total_data=0 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24642 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ .....<S. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 92 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24706 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8620 (0x21AC) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8620 max=16580 nread=16643 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 93 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24706 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8620 (0x21AC) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8620 max=16188 nread=16251 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 94 of length 45 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24770 > smt_wct=3 > smb_vwv[ 0]= 8620 (0x21AC) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8620 (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 10, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost75.exe has no outstanding locks. >[2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost75.exe (numopen=2) >[2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) > freed files structure 8620 (2 used) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24770 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 110 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6e >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 95 of length 114 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=110 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24834 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6144 (0x1800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1280 (0x500) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=27 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 37 00 35 .\.g.h.o .s.t.7.5 > [010] 00 2E 00 65 00 78 00 65 00 00 00 ...e.x.e ... >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost75.exe" >[2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST75.EXE] -> [ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost75.exe) returning 0744 >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20089 >[2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) > allocated file structure 4525, fnum = 8621 (3 used) >[2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) > fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) > billtest opened file ghost75.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 11, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8621, open name = ghost75.exe >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24834 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=44288 (0xAD00) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 415 (0x19F) > smb_vwv[ 7]=60769 (0xED61) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62357 (0xF395) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 415 (0x19F) > smb_vwv[15]=60769 (0xED61) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 415 (0x19F) > smb_vwv[19]=60769 (0xED61) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]=15360 (0x3C00) > smb_vwv[28]= 2643 (0xA53) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 96 of length 76 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24898 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 AD 21 02 01 ....!.. >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 11, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo ghost75.exe (fnum = 8621) level=258 call=7 total_data=0 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=24898 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ .....<S. > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 97 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24962 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8621 (0x21AD) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16580 (0x40C4) > smb_vwv[ 6]=16580 (0x40C4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=32768 (0x8000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 0, count = 16580, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 16580 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 16580 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=16580 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8621 max=16580 nread=16643 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 98 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=24962 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8621 (0x21AD) > smb_vwv[ 3]=16580 (0x40C4) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=16188 (0x3F3C) > smb_vwv[ 6]=16188 (0x3F3C) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=16188 (0x3F3C) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 16580, count = 16188, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 16580, count_out = 16188 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 16580 16188 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=16580 len=16188 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8621 max=16188 nread=16251 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 99 of length 45 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25026 > smt_wct=3 > smb_vwv[ 0]= 8621 (0x21AD) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8621 (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 11, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost75.exe has no outstanding locks. >[2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost75.exe (numopen=2) >[2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) > freed files structure 8621 (2 used) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25026 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:22, 5] auth/auth_util.c:debug_nt_user_token(452) > NT user token: (NULL) >[2005/08/18 16:01:22, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2005/08/18 16:01:22, 5] smbd/uid.c:change_to_root_user(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 110 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x6e >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 100 of length 114 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=110 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25090 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6144 (0x1800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=27 >[2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 37 00 35 .\.g.h.o .s.t.7.5 > [010] 00 2E 00 65 00 78 00 65 00 00 00 ...e.x.e ... >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 >[2005/08/18 16:01:22, 5] auth/auth_util.c:debug_nt_user_token(457) > NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 > contains 5 SIDs > SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 > SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SE_PRIV 0x0 0x0 0x0 0x0 >[2005/08/18 16:01:22, 5] auth/auth_util.c:debug_unix_user_token(473) > UNIX token of user 3476 > Primary group is 206 and contains 1 supplementary groups > Group[ 0]: 206 >[2005/08/18 16:01:22, 5] smbd/uid.c:change_to_user(304) > change_to_user uid=(0,3476) gid=(0,206) >[2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "ghost75.exe" >[2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [GHOST75.EXE] -> [ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(ghost75.exe) returning 0744 >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) > reduce_name [ghost75.exe] [/x04shr] >[2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] >[2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20089 >[2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) > allocated file structure 4526, fnum = 8622 (3 used) >[2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) > fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) > billtest opened file ghost75.exe read=Yes write=No (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 12, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ghost75.exe >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8622, open name = ghost75.exe >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25090 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=44544 (0xAE00) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 415 (0x19F) > smb_vwv[ 7]=60769 (0xED61) > smb_vwv[ 8]=50595 (0xC5A3) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62357 (0xF395) > smb_vwv[11]=12186 (0x2F9A) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 415 (0x19F) > smb_vwv[15]=60769 (0xED61) > smb_vwv[16]=50595 (0xC5A3) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 415 (0x19F) > smb_vwv[19]=60769 (0xED61) > smb_vwv[20]=50595 (0xC5A3) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]=15360 (0x3C00) > smb_vwv[28]= 2643 (0xA53) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 101 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25154 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8622 (0x21AE) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 2 (0x2) > smb_vwv[ 6]= 2 (0x2) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=2 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 0, count = 2, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 2 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 2 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 2 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=2 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (2) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8622 max=2 nread=65 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 102 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25218 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8622 (0x21AE) > smb_vwv[ 3]= 60 (0x3C) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4 (0x4) > smb_vwv[ 6]= 4 (0x4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=60 len=4 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 60, count = 4, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 60, count_out = 4 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 60 4 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 60 4 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=60 len=4 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (4) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8622 max=4 nread=67 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 103 of length 63 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25282 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8622 (0x21AE) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 240 (0xF0) > smb_vwv[ 5]= 64 (0x40) > smb_vwv[ 6]= 64 (0x40) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 64 (0x40) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) > is_locked: brl start=15728640 len=64 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File ghost75.exe, offset = 15728640, count = 64, type = WRITE >[2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 15728640, count_out = 64 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 15728640 64 1 >[2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 15728640 64 1 >[2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) > is_locked: posix start=15728640 len=64 unlocked for file ghost75.exe >[2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (64) too small for minimum aio_read of 0 >[2005/08/18 16:01:22, 10] smbd/fileio.c:read_file(105) > read_file (ghost75.exe): pos = 15728640, size = 64, returned 0 >[2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2585) > send_file_readX fnum=8622 max=64 nread=0 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25282 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=65535 (0xFFFF) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 59 (0x3B) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) > Transaction 104 of length 45 >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25346 > smt_wct=3 > smb_vwv[ 0]= 8622 (0x21AE) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8622 (numopen=3) >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 12, dev = 0x1e0001, inode = 20 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file ghost75.exe >[2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file ghost75.exe has no outstanding locks. >[2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) > billtest closed file ghost75.exe (numopen=2) >[2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) > freed files structure 8622 (2 used) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25346 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 124 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x7c >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 105 of length 128 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=124 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25410 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 9728 (0x2600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=41 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 .\.s.u.s .p.r.o.d > [010] 00 5F 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E ._.n.o.t .i.f.y.. > [020] 00 72 00 65 00 67 00 00 00 .r.e.g.. . >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [SUSPROD_NOTIFY.REG] >[2005/08/18 16:01:24, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (20066818:size13) SUSPROD_NOTIFY.REG -> susprod_notify.reg >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(170) > conversion finished susprod_notify.reg -> susprod_notify.reg >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(susprod_notify.reg) returning 0744 >[2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=susprod_notify.reg, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=susprod_notify.reg, after mapping access_mask=0x20089 >[2005/08/18 16:01:24, 5] smbd/files.c:file_new(139) > allocated file structure 4527, fnum = 8623 (3 used) >[2005/08/18 16:01:24, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:24, 10] smbd/open.c:fd_open(55) > fd_open: name susprod_notify.reg, flags = 00 mode = 0744, fd = 28. >[2005/08/18 16:01:24, 2] smbd/open.c:open_file(372) > billtest opened file susprod_notify.reg read=Yes write=No (numopen=3) >[2005/08/18 16:01:24, 10] locking/locking.c:set_share_mode(753) > set_share_mode: creating entry for file susprod_notify.reg. num_share_modes = 1 >[2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8623, open name = susprod_notify.reg >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25410 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=44800 (0xAF00) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=16974 (0x424E) > smb_vwv[ 7]= 9306 (0x245A) > smb_vwv[ 8]=50596 (0xC5A4) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=52150 (0xCBB6) > smb_vwv[11]= 9315 (0x2463) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=16974 (0x424E) > smb_vwv[15]= 9306 (0x245A) > smb_vwv[16]=50596 (0xC5A4) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=16974 (0x424E) > smb_vwv[19]= 9306 (0x245A) > smb_vwv[20]=50596 (0xC5A4) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 3072 (0xC00) > smb_vwv[28]= 5 (0x5) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 106 of length 118 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25474 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s > [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t > [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. > [030] 00 . >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 14:40:49 2005 > access: Thu Aug 18 14:41:05 2005 > write: Thu Aug 18 14:40:49 2005 > change: Thu Aug 18 14:40:49 2005 > mode: 1 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25474 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... > [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB > [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 107 of length 118 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25538 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s > [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t > [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. > [030] 00 . >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 14:40:49 2005 > access: Thu Aug 18 14:41:05 2005 > write: Thu Aug 18 14:40:49 2005 > change: Thu Aug 18 14:40:49 2005 > mode: 1 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25538 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... > [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB > [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 108 of length 63 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25602 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8623 (0x21AF) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 2 (0x2) > smb_vwv[ 6]= 2 (0x2) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=2 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File susprod_notify.reg, offset = 0, count = 2, type = WRITE >[2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 2 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 2 1 >[2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 2 1 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=2 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (2) too small for minimum aio_read of 0 >[2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8623 max=2 nread=65 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 109 of length 76 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25666 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 AF 21 02 01 ....!.. >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = 8623) level=258 call=7 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25666 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 110 of length 76 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25730 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 AF 21 02 01 ....!.. >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = 8623) level=258 call=7 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25730 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 111 of length 63 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25794 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8623 (0x21AF) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=4096 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File susprod_notify.reg, offset = 0, count = 4096, type = WRITE >[2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 4096 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 0 4096 1 >[2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 0 4096 1 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=4096 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 >[2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8623 max=1292 nread=1355 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 112 of length 63 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25794 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8623 (0x21AF) > smb_vwv[ 3]= 1292 (0x50C) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 2804 (0xAF4) > smb_vwv[ 6]= 2804 (0xAF4) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2804 (0xAF4) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) > is_locked: brl start=1292 len=2804 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File susprod_notify.reg, offset = 1292, count = 2804, type = WRITE >[2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 1292, count_out = 2804 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 28 11 1292 2804 1 >[2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 28 11 1292 2804 1 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) > is_locked: posix start=1292 len=2804 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (2804) too small for minimum aio_read of 0 >[2005/08/18 16:01:24, 10] smbd/fileio.c:read_file(105) > read_file (susprod_notify.reg): pos = 1292, size = 0, returned 0 >[2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2585) > send_file_readX fnum=8623 max=0 nread=0 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=25794 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=65535 (0xFFFF) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 59 (0x3B) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 124 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x7c >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 113 of length 128 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=124 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25858 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 9728 (0x2600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=41 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 .\.s.u.s .p.r.o.d > [010] 00 5F 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E ._.n.o.t .i.f.y.. > [020] 00 72 00 65 00 67 00 00 00 .r.e.g.. . >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(susprod_notify.reg) returning 0744 >[2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=susprod_notify.reg, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=susprod_notify.reg, after mapping access_mask=0x20089 >[2005/08/18 16:01:24, 5] smbd/files.c:file_new(139) > allocated file structure 4528, fnum = 8624 (4 used) >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(409) > share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x40 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(412) > share_conflict: access_mask = 0x20089, share_access = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) > share_conflict: [1] am (0x20089) & right (0x6) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) > share_conflict: [1] sa (0x1) & share (0x2) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) > share_conflict: [2] am (0x20089) & right (0x6) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) > share_conflict: [2] sa (0x1) & share (0x2) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) > share_conflict: [3] am (0x20089) & right (0x21) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) > share_conflict: [3] sa (0x1) & share (0x1) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) > share_conflict: [4] am (0x20089) & right (0x21) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) > share_conflict: [4] sa (0x1) & share (0x1) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) > share_conflict: [5] am (0x20089) & right (0x10000) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) > share_conflict: [5] sa (0x1) & share (0x4) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) > share_conflict: [6] am (0x20089) & right (0x10000) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) > share_conflict: [6] sa (0x1) & share (0x4) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(477) > share_conflict: No conflict. >[2005/08/18 16:01:24, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:24, 10] smbd/open.c:fd_open(55) > fd_open: name susprod_notify.reg, flags = 00 mode = 0744, fd = 29. >[2005/08/18 16:01:24, 2] smbd/open.c:open_file(372) > billtest opened file susprod_notify.reg read=Yes write=No (numopen=4) >[2005/08/18 16:01:24, 10] locking/locking.c:set_share_mode(775) > set_share_mode: adding entry for file susprod_notify.reg. new num_share_modes = 2 >[2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8624, open name = susprod_notify.reg >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25858 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=45056 (0xB000) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=16974 (0x424E) > smb_vwv[ 7]= 9306 (0x245A) > smb_vwv[ 8]=50596 (0xC5A4) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=52150 (0xCBB6) > smb_vwv[11]= 9315 (0x2463) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=16974 (0x424E) > smb_vwv[15]= 9306 (0x245A) > smb_vwv[16]=50596 (0xC5A4) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=16974 (0x424E) > smb_vwv[19]= 9306 (0x245A) > smb_vwv[20]=50596 (0xC5A4) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 3072 (0xC00) > smb_vwv[28]= 5 (0x5) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 114 of length 76 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25922 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 B0 21 02 01 ....!.. >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = 8624) level=258 call=7 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25922 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 115 of length 76 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25986 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 B0 21 02 01 ....!.. >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = 8624) level=258 call=7 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=25986 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 72 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x48 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 116 of length 76 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26050 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 24 (0x18) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 B0 21 02 01 ....!.. >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = 8624) level=258 call=7 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) > call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26050 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ > [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 117 of length 45 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=26114 > smt_wct=3 > smb_vwv[ 0]= 8624 (0x21B0) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/reply.c:reply_close(3247) > close fd=29 fnum=8624 (numopen=4) >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 2 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 1 for file susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file susprod_notify.reg has no outstanding locks. >[2005/08/18 16:01:24, 2] smbd/close.c:close_normal_file(270) > billtest closed file susprod_notify.reg (numopen=3) >[2005/08/18 16:01:24, 5] smbd/files.c:file_free(459) > freed files structure 8624 (3 used) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=26114 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 124 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x7c >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 118 of length 128 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=124 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26178 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 9728 (0x2600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=41 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 5C 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 .\.s.u.s .p.r.o.d > [010] 00 5F 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E ._.n.o.t .i.f.y.. > [020] 00 72 00 65 00 67 00 00 00 .r.e.g.. . >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBntcreateX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(susprod_notify.reg) returning 0744 >[2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1236) > open_file_ntcreate: fname=susprod_notify.reg, dos_attrs=0x80 access_mask=0x20089 share_access=0x3 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1409) > open_file_ntcreate: fname=susprod_notify.reg, after mapping access_mask=0x20089 >[2005/08/18 16:01:24, 5] smbd/files.c:file_new(139) > allocated file structure 4529, fnum = 8625 (4 used) >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) > get_share_modes: delete_on_close: 0 >[2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) > get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(409) > share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x40 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(412) > share_conflict: access_mask = 0x20089, share_access = 0x3 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) > share_conflict: [1] am (0x20089) & right (0x6) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) > share_conflict: [1] sa (0x3) & share (0x2) = 0x2 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) > share_conflict: [2] am (0x20089) & right (0x6) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) > share_conflict: [2] sa (0x1) & share (0x2) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) > share_conflict: [3] am (0x20089) & right (0x21) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) > share_conflict: [3] sa (0x3) & share (0x1) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) > share_conflict: [4] am (0x20089) & right (0x21) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) > share_conflict: [4] sa (0x1) & share (0x1) = 0x1 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) > share_conflict: [5] am (0x20089) & right (0x10000) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) > share_conflict: [5] sa (0x3) & share (0x4) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) > share_conflict: [6] am (0x20089) & right (0x10000) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) > share_conflict: [6] sa (0x1) & share (0x4) = 0x0 >[2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(477) > share_conflict: No conflict. >[2005/08/18 16:01:24, 4] smbd/open.c:open_file_ntcreate(1580) > calling open_file with flags=0x0 flags2=0x0 mode=0744 >[2005/08/18 16:01:24, 10] smbd/open.c:fd_open(55) > fd_open: name susprod_notify.reg, flags = 00 mode = 0744, fd = 29. >[2005/08/18 16:01:24, 2] smbd/open.c:open_file(372) > billtest opened file susprod_notify.reg read=Yes write=No (numopen=4) >[2005/08/18 16:01:24, 10] locking/locking.c:set_share_mode(775) > set_share_mode: adding entry for file susprod_notify.reg. new num_share_modes = 2 >[2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 15, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 8625, open name = susprod_notify.reg >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26178 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=45312 (0xB100) > smb_vwv[ 3]= 289 (0x121) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=16974 (0x424E) > smb_vwv[ 7]= 9306 (0x245A) > smb_vwv[ 8]=50596 (0xC5A4) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=52150 (0xCBB6) > smb_vwv[11]= 9315 (0x2463) > smb_vwv[12]=50596 (0xC5A4) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=16974 (0x424E) > smb_vwv[15]= 9306 (0x245A) > smb_vwv[16]=50596 (0xC5A4) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=16974 (0x424E) > smb_vwv[19]= 9306 (0x245A) > smb_vwv[20]=50596 (0xC5A4) > smb_vwv[21]= 257 (0x101) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 3072 (0xC00) > smb_vwv[28]= 5 (0x5) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 59 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x3b >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 119 of length 63 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=26242 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8625 (0x21B1) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 512 (0x200) > smb_vwv[ 6]= 512 (0x200) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 512 (0x200) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBreadX (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) > is_locked: brl start=0 len=512 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) > is_posix_locked: File susprod_notify.reg, offset = 0, count = 512, type = WRITE >[2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) > posix_lock_in_range: offset_out = 0, count_out = 512 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) > posix_fcntl_lock 29 11 0 512 1 >[2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) > fcntl_lock 29 11 0 512 1 >[2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) > posix_fcntl_lock: Lock call failed >[2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) > is_locked: posix start=0 len=512 unlocked for file susprod_notify.reg >[2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) > schedule_aio_read_and_X: read size (512) too small for minimum aio_read of 0 >[2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2561) > send_file_readX: sendfile fnum=8625 max=512 nread=575 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 120 of length 45 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=26306 > smt_wct=3 > smb_vwv[ 0]= 8625 (0x21B1) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/reply.c:reply_close(3247) > close fd=29 fnum=8625 (numopen=4) >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 2 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 15, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) > print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 1 for file susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file susprod_notify.reg has no outstanding locks. >[2005/08/18 16:01:24, 2] smbd/close.c:close_normal_file(270) > billtest closed file susprod_notify.reg (numopen=3) >[2005/08/18 16:01:24, 5] smbd/files.c:file_free(459) > freed files structure 8625 (3 used) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=26306 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 41 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x29 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 121 of length 45 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=26370 > smt_wct=3 > smb_vwv[ 0]= 8623 (0x21AF) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBclose (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/reply.c:reply_close(3247) > close fd=28 fnum=8623 (numopen=3) >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(658) > del_share_entry: num_share_modes = 1 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(663) > del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(673) > del_share_entry: deleting entry 0 >[2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(695) > del_share_entry: Remaining table. >[2005/08/18 16:01:24, 10] smbd/close.c:close_normal_file(203) > close_normal_file: share_entry_count = 0 for file susprod_notify.reg >[2005/08/18 16:01:24, 10] locking/posix.c:posix_locking_close_file(1249) > posix_locking_close_file: file susprod_notify.reg has no outstanding locks. >[2005/08/18 16:01:24, 2] smbd/close.c:close_normal_file(270) > billtest closed file susprod_notify.reg (numopen=2) >[2005/08/18 16:01:24, 5] smbd/files.c:file_free(459) > freed files structure 8623 (2 used) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=101 > smb_mid=26370 > smt_wct=0 > smb_bcc=0 >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 122 of length 118 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26434 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s > [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t > [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. > [030] 00 . >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 14:40:49 2005 > access: Thu Aug 18 14:41:05 2005 > write: Thu Aug 18 14:40:49 2005 > change: Thu Aug 18 14:40:49 2005 > mode: 1 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26434 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... > [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB > [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 114 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x72 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 123 of length 118 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26498 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=49 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s > [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t > [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. > [030] 00 . >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) > call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) > call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO >[2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) > SMB_QFBI - create: Thu Aug 18 14:40:49 2005 > access: Thu Aug 18 14:41:05 2005 > write: Thu Aug 18 14:40:49 2005 > change: Thu Aug 18 14:40:49 2005 > mode: 1 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26498 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... > [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB > [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . >[2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) > got smb length of 120 >[2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) > got message type 0x0 of len 0x78 >[2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) > Transaction 124 of length 124 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=120 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26562 > smt_wct=15 > smb_vwv[ 0]= 52 (0x34) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 52 (0x34) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=55 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [010] 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 00 5F .s.u.s.p .r.o.d._ > [020] 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E 00 72 .n.o.t.i .f.y...r > [030] 00 65 00 67 00 00 00 .e.g... >[2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) > switch message SMBtrans2 (pid 17002) conn 0x20094140 >[2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) > change_to_user: Skipping user change - already user >[2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2findfirst(1628) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 >[2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "susprod_notify.reg" >[2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [susprod_notify.reg] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg >[2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2findfirst(1682) > dir=./, mask = susprod_notify.reg >[2005/08/18 16:01:24, 5] smbd/dir.c:dptr_create(390) > dptr_create dir=./ >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) > reduce_name [./] [/x04shr] >[2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) > reduce_name realpath [./] -> [/x04shr] >[2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) > reduce_name: ./ reduced to /x04shr >[2005/08/18 16:01:24, 3] smbd/dir.c:dptr_create(509) > creating new dirptr 256 for path ./, expect_close = 1 >[2005/08/18 16:01:24, 4] smbd/trans2.c:call_trans2findfirst(1739) > dptr_num is 256, wcard = susprod_notify.reg, attr = 22 >[2005/08/18 16:01:24, 8] smbd/trans2.c:call_trans2findfirst(1744) > dirpath=<./> dontdescend=<> >[2005/08/18 16:01:24, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) > get_lanman2_dir_entry:readdir on dirptr 0x200683e8 now at offset -1 >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) > dos_mode: ./susprod_notify.reg >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) > dos_mode_from_sbuf returning r >[2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) > dos_mode returning r >[2005/08/18 16:01:24, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) > get_lanman2_dir_entry found ./susprod_notify.reg fname=susprod_notify.reg >[2005/08/18 16:01:24, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2005/08/18 16:01:24, 10] smbd/mangle_hash2.c:name_map(613) > name_map: susprod_notify.reg -> 1E6847C1 -> S8FQAP~T.REG (cache=1) >[2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2findfirst(1792) > call_trans2findfirst - (2) closing dptr_num 256 >[2005/08/18 16:01:24, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 132, useable_space = 131010 >[2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 10, data_to_send = 132, paramsize = 10, datasize = 132 >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) >[2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) > size=200 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=3032 > smb_uid=101 > smb_mid=26562 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 132 (0x84) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 132 (0x84) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=145 >[2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 84 00 00 ........ ........ > [010] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... > [020] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB > [030] 5A 24 A4 C5 01 0C 05 00 00 00 00 00 00 00 00 10 Z$...... ........ > [040] 00 00 00 00 00 01 00 00 00 24 00 00 00 00 00 00 ........ .$...... > [050] 00 18 00 53 00 38 00 46 00 51 00 41 00 50 00 7E ...S.8.F .Q.A.P.~ > [060] 00 54 00 2E 00 52 00 45 00 47 00 73 00 75 00 73 .T...R.E .G.s.u.s > [070] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t > [080] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. > [090] 00 . >[2005/08/18 16:01:24, 4] smbd/trans2.c:call_trans2findfirst(1828) > SMBtrans2 mask=susprod_notify.reg directory=./ dirtype=22 numentries=1 >[2005/08/18 16:01:24, 10] smbd/mangle_hash2.c:name_map(613) > name_map: susprod_notify.reg -> 1E6847C1 -> S8FQAP~T.REG (cache=1)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 3017
: 1389