The Samba-Bugzilla – Attachment 1694 Details for
Bug 3346
Upgrading from 3.0.14a or 3.0.20b to 3.0.21 fails via Firefox/Thunderbird
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
log.tetra
log.tetra (text/plain), 113.16 KB, created by
Tom Schulz
on 2006-01-16 08:02:18 UTC
(
hide
)
Description:
log.tetra
Filename:
MIME Type:
Creator:
Tom Schulz
Created:
2006-01-16 08:02:18 UTC
Size:
113.16 KB
patch
obsolete
>[2006/01/16 09:31:02, 6] param/loadparm.c:(2950) > lp_file_list_changed() > file /opt/local/sambat/lib/smb.conf.%h -> /opt/local/sambat/lib/smb.conf.angler last mod_time: Wed May 5 16:31:19 2004 > > file /opt/local/sambat/lib/smb.conf -> /opt/local/sambat/lib/smb.conf last mod_time: Mon Jan 16 09:14:59 2006 > >[2006/01/16 09:31:02, 5] smbd/reply.c:(537) > init msg_type=0x81 msg_flags=0x0 >[2006/01/16 09:31:02, 0] lib/util_sock.c:(554) > write_data: write failure in writing to client 192.168.2.23. Error Broken pipe >[2006/01/16 09:31:02, 0] lib/util_sock.c:(762) > Error writing 4 bytes to client. -1. (Broken pipe) >[2006/01/16 09:31:02, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/01/16 09:31:02, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:02, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:02, 5] smbd/uid.c:(319) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/01/16 09:31:02, 2] smbd/server.c:(614) > Closing connections >[2006/01/16 09:31:02, 3] smbd/connection.c:(69) > Yielding connection to >[2006/01/16 09:31:02, 3] smbd/connection.c:(76) > yield_connection: tdb_delete for name failed with error Record does not exist. >[2006/01/16 09:31:02, 3] smbd/server.c:(655) > Server exit (process_smb: send_smb failed.) >[2006/01/16 09:31:02, 6] param/loadparm.c:(2950) > lp_file_list_changed() > file /opt/local/sambat/lib/smb.conf.%h -> /opt/local/sambat/lib/smb.conf.angler last mod_time: Wed May 5 16:31:19 2004 > > file /opt/local/sambat/lib/smb.conf -> /opt/local/sambat/lib/smb.conf last mod_time: Mon Jan 16 09:14:59 2006 > >[2006/01/16 09:31:02, 5] auth/auth_util.c:(163) > make_user_info_map: Mapping user [ADI]\[schulz] from workstation [TETRA] >[2006/01/16 09:31:02, 10] lib/gencache.c:(269) > Returning expired cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jan 13 16:39:59 2006 > >[2006/01/16 09:31:02, 5] libsmb/trustdom_cache.c:(220) > no timestamp for trusted domain cache located. >[2006/01/16 09:31:02, 10] lib/gencache.c:(127) > Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Mon Jan 16 09:41:02 2006 > (600 seconds ahead) >[2006/01/16 09:31:02, 5] passdb/secrets.c:(291) > secrets_fetch failed! >[2006/01/16 09:31:02, 8] libsmb/namequery.c:(1433) > get_sorted_dc_list: attempting lookup using [host] >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(1028) > internal_resolve_name: looking up starfish2#20 >[2006/01/16 09:31:02, 10] lib/gencache.c:(269) > Returning valid cache entry: key = NBT/STARFISH2#20, value = 192.168.2.178:0, timeout = Mon Jan 16 09:42:02 2006 > >[2006/01/16 09:31:02, 5] libsmb/namecache.c:(201) > name starfish2#20 found. >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(320) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2006/01/16 09:31:02, 4] libsmb/namequery.c:(1406) > get_dc_list: returning 1 ip addresses in an ordered list >[2006/01/16 09:31:02, 4] libsmb/namequery.c:(1407) > get_dc_list: 192.168.2.178:0 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(188) > name_status_find: looking up ADI#1c at 192.168.2.178 >[2006/01/16 09:31:02, 10] lib/gencache.c:(291) > Cache entry with key = NBT/ADI#1C.20.192.168.2.178 couldn't be found >[2006/01/16 09:31:02, 5] libsmb/namecache.c:(308) > namecache_status_fetch: no entry for NBT/ADI#1C.20.192.168.2.178 found. >[2006/01/16 09:31:02, 10] lib/gencache.c:(214) > Deleting cache entry (key = NBT/ADI#1C.20.192.168.2.178) >[2006/01/16 09:31:02, 10] lib/util_sock.c:(832) > bind succeeded on port 0 >[2006/01/16 09:31:02, 5] libsmb/nmblib.c:(777) > Sending a packet of len 50 to (192.168.2.178) on port 137 >[2006/01/16 09:31:02, 10] lib/util_sock.c:(286) > read_udp_socket: lastip 192.168.2.178 lastport 137 read: 391 >[2006/01/16 09:31:02, 10] libsmb/nmblib.c:(506) > parse_nmb: packet id = 2161 >[2006/01/16 09:31:02, 5] libsmb/nmblib.c:(755) > Received a packet of len 391 from (192.168.2.178) port 137 >[2006/01/16 09:31:02, 4] libsmb/nmblib.c:(112) > nmb packet from 192.168.2.178(137) header: id=2161 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=ADI<1c> rr_type=33 rr_class=1 ttl=0 > answers 0 char .STARFISH2 hex 0F535441524649534832202020202020 > answers 10 char .D.ADI hex 00440041444920202020202020202020 > answers 20 char ...ADI hex 202000C4004144492020202020202020 > answers 30 char ...STARFISH2 hex 202020201CC400535441524649534832 > answers 40 char D.ADI hex 20202020202020440041444920202020 > answers 50 char .D.ADI hex 20202020202020201B44004144492020 > answers 60 char ...ADI hex 202020202020202020201EC400414449 > answers 70 char .D.. hex 2020202020202020202020201D440001 > answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F0201C4 > answers 90 char .STARFISH2 hex 00535441524649534832202020202020 > answers a0 char .D.STARFISH2$ hex 03440053544152464953483224202020 > answers b0 char .D.INet~Servic hex 2020034400494E65747E536572766963 > answers c0 char es ...ADMINISTR hex 657320201CC40041444D494E49535452 > answers d0 char ATOR .D.IS~STAR hex 41544F52202003440049537E53544152 > answers e0 char FISH2....D.JFCEN hex 46495348320000000044004A4643454E > answers f0 char TRAL .D.STA hex 5452414C202020202020034400535441 > answers 100 char RFISH2 .D.. hex 524649534832202020202020BE440000 > answers 110 char .[8............ hex 065B38177F0000000000000000000000 > answers 120 char ................ hex 00000000000000000000000000000000 > answers 130 char ............. hex 00000000000000000000000000 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > STARFISH2#00: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > ADI#00: flags = 0xc4 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > ADI#1c: flags = 0xc4 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > STARFISH2#20: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > ADI#1b: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > ADI#1e: flags = 0xc4 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > ADI#1d: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > __MSBROWSE__#01: flags = 0xc4 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > STARFISH2#03: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > STARFISH2$#03: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > INet~Services#1c: flags = 0xc4 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > ADMINISTRATOR#03: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > IS~STARFISH2#00: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > JFCENTRAL#03: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) > STARFISH2#be: flags = 0x44 >[2006/01/16 09:31:02, 10] libsmb/namequery.c:(227) > name_status_find: name found, name STARFISH2 ip address is 192.168.2.178 >[2006/01/16 09:31:02, 3] libsmb/namequery_dc.c:(145) > rpc_dc_name: Returning DC STARFISH2 (192.168.2.178) for domain ADI >[2006/01/16 09:31:02, 3] libsmb/cliconnect.c:(1389) > Connecting to host=STARFISH2 >[2006/01/16 09:31:02, 3] lib/util_sock.c:(867) > Connecting to 192.168.2.178 at port 445 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option SO_KEEPALIVE = 0 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option SO_REUSEADDR = 0 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option SO_BROADCAST = 0 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option TCP_NODELAY = 1 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option IPTOS_LOWDELAY = 0 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option IPTOS_THROUGHPUT = 0 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option SO_SNDBUF = 16384 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(203) > socket option SO_RCVBUF = 24820 >[2006/01/16 09:31:02, 5] lib/util_sock.c:(201) > Could not test socket option SO_SNDLOWAT. >[2006/01/16 09:31:02, 5] lib/util_sock.c:(201) > Could not test socket option SO_RCVLOWAT. >[2006/01/16 09:31:02, 5] lib/util_sock.c:(201) > Could not test socket option SO_SNDTIMEO. >[2006/01/16 09:31:02, 5] lib/util_sock.c:(201) > Could not test socket option SO_RCVTIMEO. >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) > write_socket(21,183) >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) > write_socket(21,183) wrote 183 >[2006/01/16 09:31:02, 10] lib/util_sock.c:(615) > got smb length of 175 >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=175 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10951 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12807 (0x3207) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 243 (0xF3) > smb_vwv[11]=64128 (0xFA80) > smb_vwv[12]= 218 (0xDA) > smb_vwv[13]=43362 (0xA962) > smb_vwv[14]=50714 (0xC61A) > smb_vwv[15]=11265 (0x2C01) > smb_vwv[16]= 1 (0x1) > smb_bcc=106 >[2006/01/16 09:31:02, 10] lib/util.c:(2058) > [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. > [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish > [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=175 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10951 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12807 (0x3207) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 243 (0xF3) > smb_vwv[11]=64128 (0xFA80) > smb_vwv[12]= 218 (0xDA) > smb_vwv[13]=43362 (0xA962) > smb_vwv[14]=50714 (0xC61A) > smb_vwv[15]=11265 (0x2C01) > smb_vwv[16]= 1 (0x1) > smb_bcc=106 >[2006/01/16 09:31:02, 10] lib/util.c:(2058) > [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. > [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish > [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) > write_socket(21,92) >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) > write_socket(21,92) wrote 92 >[2006/01/16 09:31:02, 10] lib/util_sock.c:(615) > got smb length of 123 >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=123 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10951 > smb_uid=59394 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 123 (0x7B) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=82 >[2006/01/16 09:31:02, 10] lib/util.c:(2058) > [000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d > [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 > [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n > [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I > [050] 00 00 .. >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=123 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10951 > smb_uid=59394 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 123 (0x7B) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=82 >[2006/01/16 09:31:02, 10] lib/util.c:(2058) > [000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d > [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 > [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n > [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I > [050] 00 00 .. >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) > write_socket(21,86) >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) > write_socket(21,86) wrote 86 >[2006/01/16 09:31:02, 10] lib/util_sock.c:(615) > got smb length of 48 >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/01/16 09:31:02, 10] lib/util.c:(2058) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/01/16 09:31:02, 10] libsmb/clientgen.c:(233) > cli_init_creds: user domain >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) > write_socket(21,104) >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) > write_socket(21,104) wrote 104 >[2006/01/16 09:31:02, 10] lib/util_sock.c:(615) > got smb length of 103 >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 1024 (0x400) > smb_vwv[ 3]= 384 (0x180) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(2044) > Bind RPC Pipe[8004]: \lsarpc auth_type 0, auth_level 0 >[2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(1647) > Bind Abstract Syntax: [000] 12 34 57 78 12 34 AB CD EF 00 01 23 45 67 89 AB .4Wx.4.. ...#Eg.. > [010] 00 00 00 00 .... >[2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(1650) > Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` > [010] 00 00 00 02 .... >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 0b >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0048 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000001 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_rb >[2006/01/16 09:31:02, 6] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_bba >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 0010 max_tsize: 10b8 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 0012 max_rsize: 10b8 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) > 0014 assoc_gid: 00000000 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 0018 num_contexts: 01 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 001c context_id : 0000 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) > 001e num_transfer_syntaxes: 01 >[2006/01/16 09:31:02, 6] rpc_parse/parse_prs.c:(84) > 00001f smb_io_rpc_iface >[2006/01/16 09:31:02, 7] rpc_parse/parse_prs.c:(84) > 000020 smb_io_uuid uuid >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) > 0020 data : 12345778 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 0024 data : 1234 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 0026 data : abcd >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) > 0028 data : ef 00 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) > 002a data : 01 23 45 67 89 ab >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) > 0030 version: 00000000 >[2006/01/16 09:31:02, 6] rpc_parse/parse_prs.c:(84) > 000034 smb_io_rpc_iface >[2006/01/16 09:31:02, 7] rpc_parse/parse_prs.c:(84) > 000034 smb_io_uuid uuid >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) > 0034 data : 8a885d04 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 0038 data : 1ceb >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) > 003a data : 11c9 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) > 003c data : 9f e8 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) > 003e data : 08 00 2b 10 48 60 >[2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) > 0044 version: 00000002 >[2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(770) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32772 (0x8004) > smb_bcc=87 >[2006/01/16 09:31:02, 10] lib/util.c:(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) > write_socket(21,158) >[2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) > write_socket(21,158) wrote 158 >[2006/01/16 09:31:02, 10] lib/util_sock.c:(615) > got smb length of 124 >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:02, 5] lib/util.c:(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/01/16 09:31:02, 10] lib/util.c:(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 80 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE > [020] 5C 6C 73 61 73 73 00 DC 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/01/16 09:31:02, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 80 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE > [020] 5C 6C 73 61 73 73 00 DC 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 0c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0044 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000001 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 returned 68 bytes. >[2006/01/16 09:31:03, 3] rpc_client/cli_pipe.c:(2081) > rpc_pipe_bind: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 bind request returned ok. >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 0c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0044 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000001 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_ba >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_bba >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0010 max_tsize: 10b8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0012 max_rsize: 10b8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0014 assoc_gid: 00026580 >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000018 smb_io_rpc_addr_str >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0018 len: 000c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 001a str: \PIPE\lsass. >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000026 smb_io_rpc_results >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0028 num_results: 01 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 002c result : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 002e reason : 0000 >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000030 smb_io_rpc_iface >[2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) > 000030 smb_io_uuid uuid >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0030 data : 8a885d04 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0034 data : 1ceb >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0036 data : 11c9 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 0038 data : 9f e8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 003a data : 08 00 2b 10 48 60 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0040 version: 00000002 >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1701) > check_bind_response: accepted! >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(2246) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine STARFISH2 and bound anonymously. >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(142) > init_lsa_sec_qos >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(261) > init_open_pol: attr:0 da:1 >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(193) > init_lsa_obj_attr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_q_open_pol >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 ptr : 00000001 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0004 system_name: 005c >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000008 lsa_io_obj_attr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0008 len : 00000018 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c ptr_root_dir: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 ptr_obj_name: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0014 attributes : 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0018 ptr_sec_desc: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 001c ptr_sec_qos : 00000001 >[2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) > 000020 lsa_io_obj_qos sec_qos >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0020 len : 0000000c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0024 sec_imp_level : 0002 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0026 sec_ctxt_mode : 01 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0027 effective_only: 00 >[2006/01/16 09:31:03, 3] rpc_parse/parse_lsa.c:(181) > lsa_io_sec_qos: length c does not match size 8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0028 des_access: 00000001 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0044 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000002 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 0000002c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0016 opnum : 0006 >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=150 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 68 (0x44) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32772 (0x8004) > smb_bcc=83 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., > [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... > [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ > [050] 00 00 00 ... >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,154) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,154) wrote 154 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 104 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 80 17 06 ........ ........ > [020] 58 B9 3D E7 41 A4 87 53 1D 43 29 2D 05 00 00 00 X.=.A..S .C)-.... > [030] 00 . >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 80 17 06 ........ ........ > [020] 58 B9 3D E7 41 A4 87 53 1D 43 29 2D 05 00 00 00 X.=.A..S .C)-.... > [030] 00 . >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 02 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0030 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000002 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 00000018 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0016 cancel_ct : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0017 reserved : 00 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 returned 48 bytes. >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_r_open_pol >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000000 smb_io_pol_hnd >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 data1: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0004 data2: 58061780 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 data3: 3db9 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a data4: 41e7 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 000c data5: a4 87 53 1d 43 29 2d 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) > 0014 status: NT_STATUS_OK >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(477) > init_q_enum_trust_dom >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_q_enum_trust_dom >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000000 smb_io_pol_hnd >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 data1: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0004 data2: 58061780 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 data3: 3db9 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a data4: 41e7 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 000c data5: a4 87 53 1d 43 29 2d 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0014 enum_context : 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0018 preferred_len: 00010000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0034 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000003 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 0000001c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0016 opnum : 000d >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=134 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 52 (0x34) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 52 (0x34) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32772 (0x8004) > smb_bcc=67 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ > [020] 00 00 00 00 00 0D 00 00 00 00 00 80 17 06 58 B9 ........ ......X. > [030] 3D E7 41 A4 87 53 1D 43 29 2D 05 00 00 00 00 00 =.A..S.C )-...... > [040] 00 01 00 ... >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,138) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,138) wrote 138 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 96 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 02 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0028 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000003 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 00000010 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0016 cancel_ct : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0017 reserved : 00 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) > cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) > rpc_api_pipe: got PDU len of 40 at offset 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 returned 32 bytes. >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_r_enum_trust_dom >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 enum_context: ffffffff >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0004 count: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0008 ptr: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) > 000c status: NT_STATUS_NO_MORE_ENTRIES >[2006/01/16 09:31:03, 10] libsmb/trusts_util.c:(196) > enumerate_domain_trusts: shutting down connection... >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,45) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,45) wrote 45 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 35 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=8 > smt_wct=0 > smb_bcc=0 >[2006/01/16 09:31:03, 10] libsmb/clientgen.c:(375) > cli_rpc_pipe_close: closed pipe \lsarpc to machine STARFISH2 >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,39) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,39) wrote 39 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 35 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=16388 > smb_pid=10951 > smb_uid=59394 > smb_mid=9 > smt_wct=0 > smb_bcc=0 >[2006/01/16 09:31:03, 10] lib/gencache.c:(291) > Cache entry with key = TDOM/ADI couldn't be found >[2006/01/16 09:31:03, 5] libsmb/trustdom_cache.c:(184) > no entry for trusted domain ADI found. >[2006/01/16 09:31:03, 5] auth/auth_util.c:(69) > attempting to make a user_info for schulz (schulz) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(79) > making strings for schulz's user_info struct >[2006/01/16 09:31:03, 5] auth/auth_util.c:(121) > making blobs for schulz's user_info struct >[2006/01/16 09:31:03, 10] auth/auth_util.c:(139) > made an encrypted user_info for schulz (schulz) >[2006/01/16 09:31:03, 3] auth/auth.c:(219) > check_ntlm_password: Checking password for unmapped user [ADI]\[schulz]@[TETRA] with the new password interface >[2006/01/16 09:31:03, 3] auth/auth.c:(222) > check_ntlm_password: mapped user is: [ADI]\[schulz]@[TETRA] >[2006/01/16 09:31:03, 10] auth/auth.c:(231) > check_ntlm_password: auth_context challenge created by smbserver >[2006/01/16 09:31:03, 10] auth/auth.c:(233) > challenge is: >[2006/01/16 09:31:03, 5] lib/util.c:(2058) > [000] 7F 29 00 17 62 88 3A 6F .)..b.:o >[2006/01/16 09:31:03, 10] auth/auth.c:(259) > check_ntlm_password: guest had nothing to say >[2006/01/16 09:31:03, 8] lib/util.c:(1879) > is_myname("ADI") returns 0 >[2006/01/16 09:31:03, 6] auth/auth_sam.c:(383) > check_samstrict_security: ADI is not one of my local names (ROLE_DOMAIN_MEMBER) >[2006/01/16 09:31:03, 10] auth/auth.c:(259) > check_ntlm_password: sam had nothing to say >[2006/01/16 09:31:03, 8] lib/util.c:(1879) > is_myname("ADI") returns 0 >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(26,176) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(26,176) wrote 176 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 35 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=53249 > smb_tid=0 > smb_pid=10951 > smb_uid=51203 > smb_mid=3 > smt_wct=0 > smb_bcc=0 >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(26,158) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(26,158) wrote 158 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 123 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=123 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=53249 > smb_tid=0 > smb_pid=10951 > smb_uid=57344 > smb_mid=4 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 123 (0x7B) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=82 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d > [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 > [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n > [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I > [050] 00 00 .. >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(26,43) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(26,43) wrote 43 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 39 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=39 > smb_com=0x74 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=53249 > smb_tid=0 > smb_pid=10951 > smb_uid=57344 > smb_mid=5 > smt_wct=2 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 39 (0x27) > smb_bcc=0 >[2006/01/16 09:31:03, 5] lib/username.c:(313) > Finding user schulz >[2006/01/16 09:31:03, 5] lib/username.c:(262) > Trying _Get_Pwnam(), username as lowercase is schulz >[2006/01/16 09:31:03, 5] lib/username.c:(290) > Get_Pwnam_internals did find user [schulz]! >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(617) > pdb_set_username: setting username schulz, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(698) > pdb_set_full_name: setting full name Thomas Schulz, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(833) > pdb_set_unix_homedir: setting home dir /home/users/schulz, was NULL >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(644) > pdb_set_domain: setting domain ANGLER, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(544) > pdb_set_user_sid: setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 >[2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(73) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 from rid 1620 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(580) > pdb_set_group_sid: setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 >[2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(100) > pdb_set_group_sid_from_rid: > setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 from rid 1221 >[2006/01/16 09:31:03, 4] lib/substitute.c:(359) > Home server: angler >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(752) > pdb_set_profile_path: setting profile path \\angler\schulz\profile, was >[2006/01/16 09:31:03, 4] lib/substitute.c:(359) > Home server: angler >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(806) > pdb_set_homedir: setting home dir \\angler\schulz, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(779) > pdb_set_dir_drive: setting dir drive , was NULL >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(725) > pdb_set_logon_script: setting logon script , was >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 10] lib/system_smbd.c:(167) > sys_getgrouplist: user [schulz] >[2006/01/16 09:31:03, 10] lib/system_smbd.c:(176) > sys_getgrouplist(): disabled winbindd for group lookup [user == schulz] >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 8] lib/system_smbd.c:(49) > remove_duplicate_gids: Enter 6 gids >[2006/01/16 09:31:03, 8] lib/system_smbd.c:(67) > remove_duplicate_gids: Exit 5 gids >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 >[2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 >[2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 >[2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 >[2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 >[2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 10] auth/auth_util.c:(438) > NT user token of user S-1-5-21-2004388657-1986329904-1871150094-1620 > contains 9 SIDs > SID[ 0]: S-1-5-21-2004388657-1986329904-1871150094-1620 > SID[ 1]: S-1-5-21-2004388657-1986329904-1871150094-1221 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2004388657-1986329904-1871150094-1029 > SID[ 6]: S-1-5-21-2004388657-1986329904-1871150094-1407 > SID[ 7]: S-1-5-21-2004388657-1986329904-1871150094-1619 > SID[ 8]: S-1-5-21-2004388657-1986329904-1871150094-1621 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/01/16 09:31:03, 3] auth/auth.c:(268) > check_ntlm_password: smbserver authentication for user [schulz] succeeded >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 5] auth/auth.c:(294) > check_ntlm_password: PAM Account for user [schulz] succeeded >[2006/01/16 09:31:03, 2] auth/auth.c:(307) > check_ntlm_password: authentication for user [schulz] -> [schulz] -> [schulz] succeeded >[2006/01/16 09:31:03, 5] auth/auth_util.c:(1485) > attempting to free (and zero) a user_info structure >[2006/01/16 09:31:03, 10] auth/auth_util.c:(1488) > structure was created for schulz >[2006/01/16 09:31:03, 10] libsmb/ntlmssp.c:(730) > ntlmssp_server_auth: Failed to create NTLM session key. >[2006/01/16 09:31:03, 5] libsmb/ntlmssp.c:(756) > server session key is invalid (len == 0), cannot do KEY_EXCH! >[2006/01/16 09:31:03, 3] libsmb/ntlmssp_sign.c:(332) > NTLMSSP Sign/Seal - Initialising with flags: >[2006/01/16 09:31:03, 3] libsmb/ntlmssp.c:(63) > Got NTLMSSP neg_flags=0x600082b5 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_SEAL > NTLMSSP_NEGOTIATE_LM_KEY > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2006/01/16 09:31:03, 5] libsmb/ntlmssp_sign.c:(449) > NTLMSSP Sign/Seal - using NTLM1 >[2006/01/16 09:31:03, 0] lib/fault.c:(36) > =============================================================== >[2006/01/16 09:31:03, 0] lib/fault.c:(37) > INTERNAL ERROR: Signal 11 in pid 10951 (3.0.21a) > Please read the Trouble-Shooting section of the Samba3-HOWTO >[2006/01/16 09:31:03, 0] lib/fault.c:(39) > > From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf >[2006/01/16 09:31:03, 0] lib/fault.c:(40) > =============================================================== >[2006/01/16 09:31:03, 0] lib/util.c:(1554) > PANIC: internal error >[2006/01/16 09:31:03, 6] param/loadparm.c:(2950) > lp_file_list_changed() > file /opt/local/sambat/lib/smb.conf.%h -> /opt/local/sambat/lib/smb.conf.angler last mod_time: Wed May 5 16:31:19 2004 > > file /opt/local/sambat/lib/smb.conf -> /opt/local/sambat/lib/smb.conf last mod_time: Mon Jan 16 09:14:59 2006 > >[2006/01/16 09:31:03, 5] auth/auth_util.c:(163) > make_user_info_map: Mapping user [ADI]\[schulz] from workstation [TETRA] >[2006/01/16 09:31:03, 10] lib/gencache.c:(269) > Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Mon Jan 16 09:41:02 2006 > >[2006/01/16 09:31:03, 10] lib/gencache.c:(127) > Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Mon Jan 16 09:41:03 2006 > (600 seconds ahead) >[2006/01/16 09:31:03, 5] passdb/secrets.c:(291) > secrets_fetch failed! >[2006/01/16 09:31:03, 8] libsmb/namequery.c:(1433) > get_sorted_dc_list: attempting lookup using [host] >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(1028) > internal_resolve_name: looking up starfish2#20 >[2006/01/16 09:31:03, 10] lib/gencache.c:(269) > Returning valid cache entry: key = NBT/STARFISH2#20, value = 192.168.2.178:0, timeout = Mon Jan 16 09:42:02 2006 > >[2006/01/16 09:31:03, 5] libsmb/namecache.c:(201) > name starfish2#20 found. >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(320) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2006/01/16 09:31:03, 4] libsmb/namequery.c:(1406) > get_dc_list: returning 1 ip addresses in an ordered list >[2006/01/16 09:31:03, 4] libsmb/namequery.c:(1407) > get_dc_list: 192.168.2.178:0 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(188) > name_status_find: looking up ADI#1c at 192.168.2.178 >[2006/01/16 09:31:03, 10] lib/gencache.c:(291) > Cache entry with key = NBT/ADI#1C.20.192.168.2.178 couldn't be found >[2006/01/16 09:31:03, 5] libsmb/namecache.c:(308) > namecache_status_fetch: no entry for NBT/ADI#1C.20.192.168.2.178 found. >[2006/01/16 09:31:03, 10] lib/gencache.c:(214) > Deleting cache entry (key = NBT/ADI#1C.20.192.168.2.178) >[2006/01/16 09:31:03, 10] lib/util_sock.c:(832) > bind succeeded on port 0 >[2006/01/16 09:31:03, 5] libsmb/nmblib.c:(777) > Sending a packet of len 50 to (192.168.2.178) on port 137 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(286) > read_udp_socket: lastip 192.168.2.178 lastport 137 read: 391 >[2006/01/16 09:31:03, 10] libsmb/nmblib.c:(506) > parse_nmb: packet id = 20097 >[2006/01/16 09:31:03, 5] libsmb/nmblib.c:(755) > Received a packet of len 391 from (192.168.2.178) port 137 >[2006/01/16 09:31:03, 4] libsmb/nmblib.c:(112) > nmb packet from 192.168.2.178(137) header: id=20097 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=ADI<1c> rr_type=33 rr_class=1 ttl=0 > answers 0 char .STARFISH2 hex 0F535441524649534832202020202020 > answers 10 char .D.ADI hex 00440041444920202020202020202020 > answers 20 char ...ADI hex 202000C4004144492020202020202020 > answers 30 char ...STARFISH2 hex 202020201CC400535441524649534832 > answers 40 char D.ADI hex 20202020202020440041444920202020 > answers 50 char .D.ADI hex 20202020202020201B44004144492020 > answers 60 char ...ADI hex 202020202020202020201EC400414449 > answers 70 char .D.. hex 2020202020202020202020201D440001 > answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F0201C4 > answers 90 char .STARFISH2 hex 00535441524649534832202020202020 > answers a0 char .D.STARFISH2$ hex 03440053544152464953483224202020 > answers b0 char .D.INet~Servic hex 2020034400494E65747E536572766963 > answers c0 char es ...ADMINISTR hex 657320201CC40041444D494E49535452 > answers d0 char ATOR .D.IS~STAR hex 41544F52202003440049537E53544152 > answers e0 char FISH2....D.JFCEN hex 46495348320000000044004A4643454E > answers f0 char TRAL .D.STA hex 5452414C202020202020034400535441 > answers 100 char RFISH2 .D.. hex 524649534832202020202020BE440000 > answers 110 char .[8............ hex 065B38177F0000000000000000000000 > answers 120 char ................ hex 00000000000000000000000000000000 > answers 130 char ............. hex 00000000000000000000000000 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > STARFISH2#00: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > ADI#00: flags = 0xc4 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > ADI#1c: flags = 0xc4 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > STARFISH2#20: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > ADI#1b: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > ADI#1e: flags = 0xc4 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > ADI#1d: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > __MSBROWSE__#01: flags = 0xc4 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > STARFISH2#03: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > STARFISH2$#03: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > INet~Services#1c: flags = 0xc4 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > ADMINISTRATOR#03: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > IS~STARFISH2#00: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > JFCENTRAL#03: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) > STARFISH2#be: flags = 0x44 >[2006/01/16 09:31:03, 10] libsmb/namequery.c:(227) > name_status_find: name found, name STARFISH2 ip address is 192.168.2.178 >[2006/01/16 09:31:03, 3] libsmb/namequery_dc.c:(145) > rpc_dc_name: Returning DC STARFISH2 (192.168.2.178) for domain ADI >[2006/01/16 09:31:03, 3] libsmb/cliconnect.c:(1389) > Connecting to host=STARFISH2 >[2006/01/16 09:31:03, 3] lib/util_sock.c:(867) > Connecting to 192.168.2.178 at port 445 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option SO_KEEPALIVE = 0 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option SO_REUSEADDR = 0 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option SO_BROADCAST = 0 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option TCP_NODELAY = 1 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option IPTOS_LOWDELAY = 0 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option IPTOS_THROUGHPUT = 0 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option SO_SNDBUF = 16384 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(203) > socket option SO_RCVBUF = 24820 >[2006/01/16 09:31:03, 5] lib/util_sock.c:(201) > Could not test socket option SO_SNDLOWAT. >[2006/01/16 09:31:03, 5] lib/util_sock.c:(201) > Could not test socket option SO_RCVLOWAT. >[2006/01/16 09:31:03, 5] lib/util_sock.c:(201) > Could not test socket option SO_SNDTIMEO. >[2006/01/16 09:31:03, 5] lib/util_sock.c:(201) > Could not test socket option SO_RCVTIMEO. >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,183) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,183) wrote 183 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 175 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=175 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10952 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12807 (0x3207) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 243 (0xF3) > smb_vwv[11]=63104 (0xF680) > smb_vwv[12]=33177 (0x8199) > smb_vwv[13]=43362 (0xA962) > smb_vwv[14]=50714 (0xC61A) > smb_vwv[15]=11265 (0x2C01) > smb_vwv[16]= 1 (0x1) > smb_bcc=106 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. > [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish > [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=175 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10952 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12807 (0x3207) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 243 (0xF3) > smb_vwv[11]=63104 (0xF680) > smb_vwv[12]=33177 (0x8199) > smb_vwv[13]=43362 (0xA962) > smb_vwv[14]=50714 (0xC61A) > smb_vwv[15]=11265 (0x2C01) > smb_vwv[16]= 1 (0x1) > smb_bcc=106 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. > [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish > [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,92) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,92) wrote 92 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 123 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=123 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10952 > smb_uid=8194 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 123 (0x7B) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=82 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d > [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 > [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n > [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I > [050] 00 00 .. >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=123 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=10952 > smb_uid=8194 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 123 (0x7B) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=82 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d > [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 > [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n > [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I > [050] 00 00 .. >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,86) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,86) wrote 86 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 48 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/01/16 09:31:03, 10] libsmb/clientgen.c:(233) > cli_init_creds: user domain >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,104) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,104) wrote 104 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 103 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 2816 (0xB00) > smb_vwv[ 3]= 320 (0x140) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(2044) > Bind RPC Pipe[400b]: \lsarpc auth_type 0, auth_level 0 >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1647) > Bind Abstract Syntax: [000] 12 34 57 78 12 34 AB CD EF 00 01 23 45 67 89 AB .4Wx.4.. ...#Eg.. > [010] 00 00 00 00 .... >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1650) > Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` > [010] 00 00 00 02 .... >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 0b >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0048 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000001 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_rb >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_bba >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0010 max_tsize: 10b8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0012 max_rsize: 10b8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0014 assoc_gid: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0018 num_contexts: 01 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 001c context_id : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 001e num_transfer_syntaxes: 01 >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 00001f smb_io_rpc_iface >[2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) > 000020 smb_io_uuid uuid >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0020 data : 12345778 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0024 data : 1234 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0026 data : abcd >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 0028 data : ef 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 002a data : 01 23 45 67 89 ab >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0030 version: 00000000 >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000034 smb_io_rpc_iface >[2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) > 000034 smb_io_uuid uuid >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0034 data : 8a885d04 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0038 data : 1ceb >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 003a data : 11c9 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 003c data : 9f e8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 003e data : 08 00 2b 10 48 60 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0044 version: 00000002 >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16395 (0x400B) > smb_bcc=87 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,158) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,158) wrote 158 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 124 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 81 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 81 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 0c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0044 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000001 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b returned 68 bytes. >[2006/01/16 09:31:03, 3] rpc_client/cli_pipe.c:(2081) > rpc_pipe_bind: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b bind request returned ok. >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 0c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0044 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000001 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_ba >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_bba >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0010 max_tsize: 10b8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0012 max_rsize: 10b8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0014 assoc_gid: 00026581 >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000018 smb_io_rpc_addr_str >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0018 len: 000c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 001a str: \PIPE\lsass. >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000026 smb_io_rpc_results >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0028 num_results: 01 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 002c result : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 002e reason : 0000 >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000030 smb_io_rpc_iface >[2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) > 000030 smb_io_uuid uuid >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0030 data : 8a885d04 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0034 data : 1ceb >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0036 data : 11c9 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 0038 data : 9f e8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 003a data : 08 00 2b 10 48 60 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0040 version: 00000002 >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1701) > check_bind_response: accepted! >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(2246) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine STARFISH2 and bound anonymously. >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(142) > init_lsa_sec_qos >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(261) > init_open_pol: attr:0 da:1 >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(193) > init_lsa_obj_attr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_q_open_pol >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 ptr : 00000001 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0004 system_name: 005c >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000008 lsa_io_obj_attr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0008 len : 00000018 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c ptr_root_dir: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 ptr_obj_name: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0014 attributes : 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0018 ptr_sec_desc: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 001c ptr_sec_qos : 00000001 >[2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) > 000020 lsa_io_obj_qos sec_qos >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0020 len : 0000000c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0024 sec_imp_level : 0002 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0026 sec_ctxt_mode : 01 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0027 effective_only: 00 >[2006/01/16 09:31:03, 3] rpc_parse/parse_lsa.c:(181) > lsa_io_sec_qos: length c does not match size 8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0028 des_access: 00000001 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0044 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000002 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 0000002c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0016 opnum : 0006 >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=150 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 68 (0x44) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16395 (0x400B) > smb_bcc=83 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., > [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... > [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ > [050] 00 00 00 ... >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,154) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,154) wrote 154 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 104 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 E8 91 4B ........ .......K > [020] 85 40 7D 75 40 92 E7 73 C7 8B 5D EB B9 00 00 00 .@}u@..s ..]..... > [030] 00 . >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 E8 91 4B ........ .......K > [020] 85 40 7D 75 40 92 E7 73 C7 8B 5D EB B9 00 00 00 .@}u@..s ..]..... > [030] 00 . >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 02 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0030 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000002 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 00000018 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0016 cancel_ct : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0017 reserved : 00 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b returned 48 bytes. >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_r_open_pol >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000000 smb_io_pol_hnd >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 data1: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0004 data2: 854b91e8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 data3: 7d40 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a data4: 4075 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 000c data5: 92 e7 73 c7 8b 5d eb b9 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) > 0014 status: NT_STATUS_OK >[2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(477) > init_q_enum_trust_dom >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_q_enum_trust_dom >[2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) > 000000 smb_io_pol_hnd >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 data1: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0004 data2: 854b91e8 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 data3: 7d40 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a data4: 4075 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) > 000c data5: 92 e7 73 c7 8b 5d eb b9 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0014 enum_context : 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0018 preferred_len: 00010000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0034 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000003 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 0000001c >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0016 opnum : 000d >[2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=134 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 52 (0x34) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 52 (0x34) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16395 (0x400B) > smb_bcc=67 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ > [020] 00 00 00 00 00 0D 00 00 00 00 00 E8 91 4B 85 40 ........ .....K.@ > [030] 7D 75 40 92 E7 73 C7 8B 5D EB B9 00 00 00 00 00 }u@..s.. ]....... > [040] 00 01 00 ... >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,138) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,138) wrote 138 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 96 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0000 major : 05 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0001 minor : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0002 pkt_type : 02 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0003 flags : 03 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0004 pack_type0: 10 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0005 pack_type1: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0006 pack_type2: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0007 pack_type3: 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0008 frag_len : 0028 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 000a auth_len : 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 000c call_id : 00000003 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0010 alloc_hint: 00000010 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) > 0014 context_id: 0000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0016 cancel_ct : 00 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) > 0017 reserved : 00 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) > cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) > rpc_api_pipe: got PDU len of 40 at offset 0 >[2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) > rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b returned 32 bytes. >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) > 000000 lsa_io_r_enum_trust_dom >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0000 enum_context: ffffffff >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0004 count: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) > 0008 ptr: 00000000 >[2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) > 000c status: NT_STATUS_NO_MORE_ENTRIES >[2006/01/16 09:31:03, 10] libsmb/trusts_util.c:(196) > enumerate_domain_trusts: shutting down connection... >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,45) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,45) wrote 45 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 35 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=8 > smt_wct=0 > smb_bcc=0 >[2006/01/16 09:31:03, 10] libsmb/clientgen.c:(375) > cli_rpc_pipe_close: closed pipe \lsarpc to machine STARFISH2 >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(21,39) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(21,39) wrote 39 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 35 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=4097 > smb_pid=10952 > smb_uid=8194 > smb_mid=9 > smt_wct=0 > smb_bcc=0 >[2006/01/16 09:31:03, 10] lib/gencache.c:(291) > Cache entry with key = TDOM/ADI couldn't be found >[2006/01/16 09:31:03, 5] libsmb/trustdom_cache.c:(184) > no entry for trusted domain ADI found. >[2006/01/16 09:31:03, 5] auth/auth_util.c:(69) > attempting to make a user_info for schulz (schulz) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(79) > making strings for schulz's user_info struct >[2006/01/16 09:31:03, 5] auth/auth_util.c:(121) > making blobs for schulz's user_info struct >[2006/01/16 09:31:03, 10] auth/auth_util.c:(139) > made an encrypted user_info for schulz (schulz) >[2006/01/16 09:31:03, 3] auth/auth.c:(219) > check_ntlm_password: Checking password for unmapped user [ADI]\[schulz]@[TETRA] with the new password interface >[2006/01/16 09:31:03, 3] auth/auth.c:(222) > check_ntlm_password: mapped user is: [ADI]\[schulz]@[TETRA] >[2006/01/16 09:31:03, 10] auth/auth.c:(231) > check_ntlm_password: auth_context challenge created by smbserver >[2006/01/16 09:31:03, 10] auth/auth.c:(233) > challenge is: >[2006/01/16 09:31:03, 5] lib/util.c:(2058) > [000] E2 2C 5B 15 85 A4 B5 53 .,[....S >[2006/01/16 09:31:03, 10] auth/auth.c:(259) > check_ntlm_password: guest had nothing to say >[2006/01/16 09:31:03, 8] lib/util.c:(1879) > is_myname("ADI") returns 0 >[2006/01/16 09:31:03, 6] auth/auth_sam.c:(383) > check_samstrict_security: ADI is not one of my local names (ROLE_DOMAIN_MEMBER) >[2006/01/16 09:31:03, 10] auth/auth.c:(259) > check_ntlm_password: sam had nothing to say >[2006/01/16 09:31:03, 8] lib/util.c:(1879) > is_myname("ADI") returns 0 >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(26,176) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(26,176) wrote 176 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 35 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=53249 > smb_tid=0 > smb_pid=10952 > smb_uid=55299 > smb_mid=3 > smt_wct=0 > smb_bcc=0 >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(26,158) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(26,158) wrote 158 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 123 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=123 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=53249 > smb_tid=0 > smb_pid=10952 > smb_uid=61440 > smb_mid=4 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 123 (0x7B) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=82 >[2006/01/16 09:31:03, 10] lib/util.c:(2058) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d > [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 > [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n > [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I > [050] 00 00 .. >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) > write_socket(26,43) >[2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) > write_socket(26,43) wrote 43 >[2006/01/16 09:31:03, 10] lib/util_sock.c:(615) > got smb length of 39 >[2006/01/16 09:31:03, 5] lib/util.c:(454) >[2006/01/16 09:31:03, 5] lib/util.c:(464) > size=39 > smb_com=0x74 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=53249 > smb_tid=0 > smb_pid=10952 > smb_uid=61440 > smb_mid=5 > smt_wct=2 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 39 (0x27) > smb_bcc=0 >[2006/01/16 09:31:03, 5] lib/username.c:(313) > Finding user schulz >[2006/01/16 09:31:03, 5] lib/username.c:(262) > Trying _Get_Pwnam(), username as lowercase is schulz >[2006/01/16 09:31:03, 5] lib/username.c:(290) > Get_Pwnam_internals did find user [schulz]! >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(617) > pdb_set_username: setting username schulz, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(698) > pdb_set_full_name: setting full name Thomas Schulz, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(833) > pdb_set_unix_homedir: setting home dir /home/users/schulz, was NULL >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(644) > pdb_set_domain: setting domain ANGLER, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(544) > pdb_set_user_sid: setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 >[2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(73) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 from rid 1620 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(580) > pdb_set_group_sid: setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 >[2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(100) > pdb_set_group_sid_from_rid: > setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 from rid 1221 >[2006/01/16 09:31:03, 4] lib/substitute.c:(359) > Home server: angler >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(752) > pdb_set_profile_path: setting profile path \\angler\schulz\profile, was >[2006/01/16 09:31:03, 4] lib/substitute.c:(359) > Home server: angler >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(806) > pdb_set_homedir: setting home dir \\angler\schulz, was >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(779) > pdb_set_dir_drive: setting dir drive , was NULL >[2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(725) > pdb_set_logon_script: setting logon script , was >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 10] lib/system_smbd.c:(167) > sys_getgrouplist: user [schulz] >[2006/01/16 09:31:03, 10] lib/system_smbd.c:(176) > sys_getgrouplist(): disabled winbindd for group lookup [user == schulz] >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 8] lib/system_smbd.c:(49) > remove_duplicate_gids: Enter 6 gids >[2006/01/16 09:31:03, 8] lib/system_smbd.c:(67) > remove_duplicate_gids: Exit 5 gids >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 >[2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:03, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:03, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 >[2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:04, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:04, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:04, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 >[2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:04, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:04, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:04, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 >[2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:04, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/01/16 09:31:04, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:04, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 >[2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) > gid_to_sid: local 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/01/16 09:31:04, 10] auth/auth_util.c:(438) > NT user token of user S-1-5-21-2004388657-1986329904-1871150094-1620 > contains 9 SIDs > SID[ 0]: S-1-5-21-2004388657-1986329904-1871150094-1620 > SID[ 1]: S-1-5-21-2004388657-1986329904-1871150094-1221 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2004388657-1986329904-1871150094-1029 > SID[ 6]: S-1-5-21-2004388657-1986329904-1871150094-1407 > SID[ 7]: S-1-5-21-2004388657-1986329904-1871150094-1619 > SID[ 8]: S-1-5-21-2004388657-1986329904-1871150094-1621 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/01/16 09:31:04, 3] auth/auth.c:(268) > check_ntlm_password: smbserver authentication for user [schulz] succeeded >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 3] smbd/uid.c:(388) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/01/16 09:31:04, 5] auth/auth_util.c:(433) > NT user token: (NULL) >[2006/01/16 09:31:04, 5] auth/auth_util.c:(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/01/16 09:31:04, 5] auth/auth.c:(294) > check_ntlm_password: PAM Account for user [schulz] succeeded >[2006/01/16 09:31:04, 2] auth/auth.c:(307) > check_ntlm_password: authentication for user [schulz] -> [schulz] -> [schulz] succeeded >[2006/01/16 09:31:04, 5] auth/auth_util.c:(1485) > attempting to free (and zero) a user_info structure >[2006/01/16 09:31:04, 10] auth/auth_util.c:(1488) > structure was created for schulz >[2006/01/16 09:31:04, 10] libsmb/ntlmssp.c:(730) > ntlmssp_server_auth: Failed to create NTLM session key. >[2006/01/16 09:31:04, 5] libsmb/ntlmssp.c:(756) > server session key is invalid (len == 0), cannot do KEY_EXCH! >[2006/01/16 09:31:04, 3] libsmb/ntlmssp_sign.c:(332) > NTLMSSP Sign/Seal - Initialising with flags: >[2006/01/16 09:31:04, 3] libsmb/ntlmssp.c:(63) > Got NTLMSSP neg_flags=0x600082b5 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_SEAL > NTLMSSP_NEGOTIATE_LM_KEY > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2006/01/16 09:31:04, 5] libsmb/ntlmssp_sign.c:(449) > NTLMSSP Sign/Seal - using NTLM1 >[2006/01/16 09:31:04, 0] lib/fault.c:(36) > =============================================================== >[2006/01/16 09:31:04, 0] lib/fault.c:(37) > INTERNAL ERROR: Signal 11 in pid 10952 (3.0.21a) > Please read the Trouble-Shooting section of the Samba3-HOWTO >[2006/01/16 09:31:04, 0] lib/fault.c:(39) > > From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf >[2006/01/16 09:31:04, 0] lib/fault.c:(40) > =============================================================== >[2006/01/16 09:31:04, 0] lib/util.c:(1554) > PANIC: internal error
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 3346
:
1645
|
1672
|
1673
|
1690
|
1691
|
1692
|
1693
| 1694