The Samba-Bugzilla – Attachment 1767 Details for
Bug 3474
Joining a Domain fails with segfault on Solaris 9 with 64 Bit binaries
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Output of a net join-command with -d10
net_debug10.out (text/plain), 114.32 KB, created by
Christian Walther
on 2006-03-02 07:43:53 UTC
(
hide
)
Description:
Output of a net join-command with -d10
Filename:
MIME Type:
Creator:
Christian Walther
Created:
2006-03-02 07:43:53 UTC
Size:
114.32 KB
patch
obsolete
>[2006/03/02 14:40:26, 5] lib/debug.c:debug_dump_status(368) > INFO: Current debug levels: > all: True/10 > tdb: False/0 > printdrivers: False/0 > lanman: False/0 > smb: False/0 > rpc_parse: False/0 > rpc_srv: False/0 > rpc_cli: False/0 > passdb: False/0 > sam: False/0 > auth: False/0 > winbind: False/0 > vfs: False/0 > idmap: False/0 > quota: False/0 > acls: False/0 > locking: False/0 > msdfs: False/0 >[2006/03/02 14:40:26, 3] param/loadparm.c:lp_load(4199) > lp_load: refreshing parameters >[2006/03/02 14:40:26, 3] param/loadparm.c:init_globals(1385) > Initialising global parameters >[2006/03/02 14:40:26, 3] param/params.c:pm_process(574) > params.c:pm_process() - Processing configuration file "../lib/smb.conf" > doing parameter workgroup = NTGADDOM > doing parameter netbios name = VMWSOL >[2006/03/02 14:40:26, 4] param/loadparm.c:handle_netbios_name(2994) > handle_netbios_name: set global_myname to: VMWSOL > doing parameter interfaces = 10.65.103.32/255.255.255.0 > doing parameter security = SERVER > doing parameter encrypt passwords = Yes > doing parameter password server = glpls01 > doing parameter username map = /usr/ae/etc/samba/users.map > doing parameter log level = 3 > doing parameter log file = /var/log/samba.log.%m > doing parameter debug uid = Yes > doing parameter local master = No > doing parameter kernel oplocks = No > doing parameter create mask = 0774 > doing parameter directory mask = 0775 > doing parameter oplocks = No > doing parameter dont descend = /view > doing parameter dos filemode = Yes > doing parameter dos filetimes = Yes >[2006/03/02 14:40:26, 4, effective(0, 1), real(0, 1)] param/loadparm.c:lp_load(4230) > pm_process() returned Yes >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] param/loadparm.c:lp_servicenumber(4343) > lp_servicenumber: couldn't find homes >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] param/loadparm.c:set_server_role(4163) > set_server_role: role = ROLE_DOMAIN_MEMBER >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UCS-2LE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset UCS-2LE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF-16LE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset UTF-16LE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UCS-2BE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset UCS-2BE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF-16BE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset UTF-16BE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset UTF8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UTF-8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset UTF-8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset ASCII >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset ASCII >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset 646 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset 646 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset ISO-8859-1 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset ISO-8859-1 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(103) > Attempting to register new charset UCS2-HEX >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/iconv.c:smb_register_charset(111) > Registered charset UCS2-HEX >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/charcnv.c:charset_name(81) > Substituting charset '646' for LOCALE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:init_names(260) > Netbios name list:- > my_netbios_names[0]="VMWSOL" >[2006/03/02 14:40:26, 2, effective(0, 1), real(0, 1)] lib/interface.c:add_interface(81) > added interface ip=10.65.103.32 bcast=10.65.103.255 nmask=255.255.255.0 >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] libsmb/cliconnect.c:cli_start_connection(1389) > Connecting to host=10.64.197.46 >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] lib/util_sock.c:open_socket_out(870) > Connecting to 10.64.197.46 at port 445 >[2006/03/02 14:40:26, 2, effective(0, 1), real(0, 1)] lib/util_sock.c:open_socket_out(907) > error connecting to 10.64.197.46:445 (Connection refused) >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] lib/util_sock.c:open_socket_out(870) > Connecting to 10.64.197.46 at port 139 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 49152 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 49640 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_SNDLOWAT. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_RCVLOWAT. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_SNDTIMEO. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_RCVTIMEO. >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,72) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,72) wrote 72 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] libsmb/cliconnect.c:cli_session_request(1234) > Sent session request >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=0 > smb_com=0x0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=0 > smb_flg2=0 > smb_tid=0 > smb_pid=0 > smb_uid=0 > smb_mid=0 > smt_wct=0 > smb_bcc=0 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,183) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,183) wrote 183 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 127 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=4349 > smb_uid=0 > smb_mid=2 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=60928 (0xEE00) > smb_vwv[ 8]= 25 (0x19) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]= 128 (0x80) > smb_vwv[12]=21528 (0x5418) > smb_vwv[13]=65267 (0xFEF3) > smb_vwv[14]=50749 (0xC63D) > smb_vwv[15]=50177 (0xC401) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 67 6C 70 6C 73 30 31 00 00 00 00 00 00 00 00 00 glpls01. ........ > [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... > [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... > [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=4349 > smb_uid=0 > smb_mid=2 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=60928 (0xEE00) > smb_vwv[ 8]= 25 (0x19) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]= 128 (0x80) > smb_vwv[12]=21528 (0x5418) > smb_vwv[13]=65267 (0xFEF3) > smb_vwv[14]=50749 (0xC63D) > smb_vwv[15]=50177 (0xC401) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 67 6C 70 6C 73 30 31 00 00 00 00 00 00 00 00 00 glpls01. ........ > [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... > [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... > [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,92) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,92) wrote 92 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 116 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=116 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=4349 > smb_uid=100 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=75 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m > [010] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 31 .b.a. .3 ...0...1 > [020] 00 34 00 61 00 2D 00 30 00 2E 00 34 00 2D 00 53 .4.a.-.0 ...4.-.S > [030] 00 55 00 53 00 45 00 00 00 4E 00 54 00 47 00 41 .U.S.E.. .N.T.G.A > [040] 00 44 00 44 00 4F 00 4D 00 00 00 .D.D.O.M ... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=116 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=4349 > smb_uid=100 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=75 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m > [010] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 31 .b.a. .3 ...0...1 > [020] 00 34 00 61 00 2D 00 30 00 2E 00 34 00 2D 00 53 .4.a.-.0 ...4.-.S > [030] 00 55 00 53 00 45 00 00 00 4E 00 54 00 47 00 41 .U.S.E.. .N.T.G.A > [040] 00 44 00 44 00 4F 00 4D 00 00 00 .D.D.O.M ... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,92) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,92) wrote 92 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 48 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=4 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/clientgen.c:cli_init_creds(233) > cli_init_creds: user domain >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,104) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,104) wrote 104 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 103 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=5 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 7680 (0x1E00) > smb_vwv[ 3]= 372 (0x174) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[741e]: \lsarpc auth_type 0, auth_level 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 12 34 57 78 12 34 AB CD EF 00 01 23 45 67 89 AB .4Wx.4.. ...#Eg.. > [010] 00 00 00 00 .... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` > [010] 00 00 00 02 .... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0b >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0048 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0018 num_contexts: 01 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 001c context_id : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 001e num_transfer_syntaxes: 01 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 data : 12345778 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0024 data : 1234 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0026 data : abcd >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 0028 data : ef 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 002a data : 01 23 45 67 89 ab >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 version: 00000000 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 data : 8a885d04 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0038 data : 1ceb >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 003a data : 11c9 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 003c data : 9f e8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 003e data : 08 00 2b 10 48 60 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 version: 00000002 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29726 (0x741E) > smb_bcc=87 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,158) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,158) wrote 158 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 124 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F0 53 00 00 0C 00 5C 50 49 50 45 ......S. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F0 53 00 00 0C 00 5C 50 49 50 45 ......S. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e returned 68 bytes. >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e bind request returned ok. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 000053f0 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0018 len: 000c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 001a str: \PIPE\lsass. >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 num_results: 01 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 002c result : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 002e reason : 0000 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 data : 8a885d04 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0034 data : 1ceb >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0036 data : 11c9 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 0038 data : 9f e8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 003a data : 08 00 2b 10 48 60 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0040 version: 00000002 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine 10.64.197.46 and bound anonymously. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_lsa.c:init_q_open_pol(261) > init_open_pol: attr:0 da:33554432 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193) > init_lsa_obj_attr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_open_pol >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 ptr : 00000001 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0004 system_name: 005c >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000008 lsa_io_obj_attr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 len : 00000018 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c ptr_root_dir: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 ptr_obj_name: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 attributes : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 ptr_sec_desc: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 001c ptr_sec_qos : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 des_access: 02000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 003c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000002 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000024 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 0006 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=142 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 60 (0x3C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 60 (0x3C) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29726 (0x741E) > smb_bcc=75 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 3C 00 00 00 02 00 00 00 24 .......< .......$ > [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... > [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 00 00 00 00 00 02 ........ ... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,146) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,146) wrote 146 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 104 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ > [020] 00 00 00 00 00 F0 F5 06 44 EE 19 00 00 00 00 00 ........ D....... > [030] 00 . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ > [020] 00 00 00 00 00 F0 F5 06 44 EE 19 00 00 00 00 00 ........ D....... > [030] 00 . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0030 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000002 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000018 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e returned 48 bytes. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_open_pol >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 data1: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 data2: 00000001 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 data3: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a data4: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 000c data5: f0 f5 06 44 ee 19 00 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_ntstatus(762) > 0014 status: NT_STATUS_OK >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_lsa.c:init_q_query(445) > init_q_query >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_query >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 data1: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 data2: 00000001 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 data3: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a data4: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 000c data5: f0 f5 06 44 ee 19 00 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 info_class: 0005 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 002e >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000003 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000016 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 0007 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=128 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=8 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 46 (0x2E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 46 (0x2E) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29726 (0x741E) > smb_bcc=61 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 2E 00 00 00 03 00 00 00 16 ........ ........ > [020] 00 00 00 00 00 07 00 00 00 00 00 01 00 00 00 00 ........ ........ > [030] 00 00 00 F0 F5 06 44 EE 19 00 00 05 00 ......D. ..... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,132) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,132) wrote 132 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 160 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=8 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 03 00 00 ........ .h...... > [010] 00 50 00 00 00 00 00 00 00 00 00 00 22 05 00 00 .P...... ...."... > [020] 00 10 00 12 00 01 00 00 00 01 00 00 00 09 00 00 ........ ........ > [030] 00 00 00 00 00 08 00 00 00 4E 00 54 00 47 00 41 ........ .N.T.G.A > [040] 00 44 00 44 00 4F 00 4D 00 04 00 00 00 01 04 00 .D.D.O.M ........ > [050] 00 00 00 00 05 15 00 00 00 85 6B B1 79 51 0D E1 ........ ..k.yQ.. > [060] 24 A2 04 F6 5B 00 00 00 00 $...[... . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=8 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 03 00 00 ........ .h...... > [010] 00 50 00 00 00 00 00 00 00 00 00 00 22 05 00 00 .P...... ...."... > [020] 00 10 00 12 00 01 00 00 00 01 00 00 00 09 00 00 ........ ........ > [030] 00 00 00 00 00 08 00 00 00 4E 00 54 00 47 00 41 ........ .N.T.G.A > [040] 00 44 00 44 00 4F 00 4D 00 04 00 00 00 01 04 00 .D.D.O.M ........ > [050] 00 00 00 00 05 15 00 00 00 85 6B B1 79 51 0D E1 ........ ..k.yQ.. > [060] 24 A2 04 F6 5B 00 00 00 00 $...[... . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0068 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000003 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000050 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 104, data_len 80, ss_len 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 104 at offset 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e returned 160 bytes. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_query >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 undoc_buffer: 22000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0004 info_class: 0005 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000008 lsa_io_dom_query >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 uni_dom_max_len: 0010 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a uni_dom_str_len: 0012 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c buffer_dom_name: 00000001 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 buffer_dom_sid : 00000001 >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000014 smb_io_unistr2 unistr2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 uni_max_len: 00000009 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 offset : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 001c uni_str_len: 00000008 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0020 buffer : N.T.G.A.D.D.O.M. >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_dom_sid2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 num_auths: 00000004 >[2006/03/02 14:40:26, 8, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_dom_sid sid >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0034 sid_rev_num: 01 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0035 num_auths : 04 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0036 id_auth[0] : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0037 id_auth[1] : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0038 id_auth[2] : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0039 id_auth[3] : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 003a id_auth[4] : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 003b id_auth[5] : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32s(959) > 003c sub_auths : 00000015 79b16b85 24e10d51 5bf604a2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_ntstatus(762) > 004c status: NT_STATUS_OK >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_lsa.c:init_lsa_q_close(1192) > init_lsa_q_close >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_close >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 data1: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 data2: 00000001 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 data3: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a data4: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 000c data5: f0 f5 06 44 ee 19 00 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 002c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000004 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000014 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=126 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=9 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 44 (0x2C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 44 (0x2C) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29726 (0x741E) > smb_bcc=59 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 2C 00 00 00 04 00 00 00 14 ......., ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 ........ ........ > [030] 00 00 00 F0 F5 06 44 EE 19 00 00 ......D. ... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,130) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,130) wrote 130 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 104 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0030 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000004 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000018 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \lsarpc fnum 0x741e returned 48 bytes. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_close >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 data1: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 data2: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 data3: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a data4: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 000c data5: 00 00 00 00 00 00 00 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_ntstatus(762) > 0014 status: NT_STATUS_OK >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,45) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,45) wrote 45 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=10 > smt_wct=0 > smb_bcc=0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/clientgen.c:cli_rpc_pipe_close(383) > cli_rpc_pipe_close: closed pipe \lsarpc to machine 10.64.197.46 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,108) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,108) wrote 108 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 103 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=11 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 7936 (0x1F00) > smb_vwv[ 3]= 372 (0x174) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[741f]: \NETLOGON auth_type 0, auth_level 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 12 34 56 78 12 34 AB CD EF 00 01 23 45 67 CF FB .4Vx.4.. ...#Eg.. > [010] 00 00 00 01 .... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` > [010] 00 00 00 02 .... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0b >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0048 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000005 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0018 num_contexts: 01 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 001c context_id : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 001e num_transfer_syntaxes: 01 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 data : 12345678 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0024 data : 1234 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0026 data : abcd >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 0028 data : ef 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 002a data : 01 23 45 67 cf fb >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 version: 00000001 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 data : 8a885d04 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0038 data : 1ceb >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 003a data : 11c9 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 003c data : 9f e8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 003e data : 08 00 2b 10 48 60 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 version: 00000002 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \NETLOGON fnum 0x741f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=12 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29727 (0x741F) > smb_bcc=87 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 05 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,158) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,158) wrote 158 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 124 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=12 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 05 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F0 53 00 00 0C 00 5C 50 49 50 45 ......S. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=12 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 05 00 00 ........ .D...... > [010] 00 B8 10 B8 10 F0 53 00 00 0C 00 5C 50 49 50 45 ......S. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000005 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \NETLOGON fnum 0x741f returned 68 bytes. >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine 10.64.197.46 pipe \NETLOGON fnum 0x741f bind request returned ok. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000005 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 000053f0 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0018 len: 000c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 001a str: \PIPE\lsass. >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 num_results: 01 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 002c result : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 002e reason : 0000 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 data : 8a885d04 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0034 data : 1ceb >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0036 data : 11c9 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 0038 data : 9f e8 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 003a data : 08 00 2b 10 48 60 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0040 version: 00000002 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) > cli_rpc_pipe_open_noauth: opened pipe \NETLOGON to machine 10.64.197.46 and bound anonymously. >[2006/03/02 14:40:26, 4, effective(0, 1), real(0, 1)] rpc_client/cli_netlogon.c:rpccli_net_req_chal(46) > cli_net_req_chal: LSA Request Challenge from VMWSOL to \\10.64.197.46 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_net.c:init_q_req_chal(679) > init_q_req_chal: 679 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_net.c:init_q_req_chal(688) > init_q_req_chal: 688 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_req_chal >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 undoc_buffer: 00000001 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 uni_max_len: 0000000f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 offset : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c uni_str_len: 0000000f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0010 buffer : \.\.1.0...6.4...1.9.7...4.6... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 00002e smb_io_unistr2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 uni_max_len: 00000007 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 offset : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0038 uni_str_len: 00000007 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 003c buffer : V.M.W.S.O.L... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 00004a smb_io_chal >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 004a data: 15 66 73 fd b0 6f 21 b0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 006a >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000006 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000052 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 0004 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \NETLOGON fnum 0x741f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=188 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=13 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 106 (0x6A) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 106 (0x6A) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29727 (0x741F) > smb_bcc=121 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 6A 00 00 00 06 00 00 00 52 .......j .......R > [020] 00 00 00 00 00 04 00 01 00 00 00 0F 00 00 00 00 ........ ........ > [030] 00 00 00 0F 00 00 00 5C 00 5C 00 31 00 30 00 2E .......\ .\.1.0.. > [040] 00 36 00 34 00 2E 00 31 00 39 00 37 00 2E 00 34 .6.4...1 .9.7...4 > [050] 00 36 00 00 00 00 00 07 00 00 00 00 00 00 00 07 .6...... ........ > [060] 00 00 00 56 00 4D 00 57 00 53 00 4F 00 4C 00 00 ...V.M.W .S.O.L.. > [070] 00 15 66 73 FD B0 6F 21 B0 ..fs..o! . >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,192) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,192) wrote 192 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 92 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=13 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 06 00 00 ........ .$...... > [010] 00 0C 00 00 00 00 00 00 00 88 75 81 0C DB F2 6C ........ ..u....l > [020] B9 00 00 00 00 ..... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=13 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 06 00 00 ........ .$...... > [010] 00 0C 00 00 00 00 00 00 00 88 75 81 0C DB F2 6C ........ ..u....l > [020] B9 00 00 00 00 ..... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0024 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000006 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 0000000c >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 36, data_len 12, ss_len 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 36 at offset 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \NETLOGON fnum 0x741f returned 24 bytes. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_req_chal >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_chal >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 0000 data: 88 75 81 0c db f2 6c b9 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_ntstatus(762) > 0008 status: NT_STATUS_OK >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/credentials.c:creds_client_init(213) > creds_client_init: client chal : 156673FDB06F21B0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/credentials.c:creds_client_init(214) > creds_client_init: server chal : 8875810CDBF26CB9 >[2006/03/02 14:40:26, 4, effective(0, 1), real(0, 1)] libsmb/credentials.c:cred_create_session_key(65) > cred_create_session_key >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] libsmb/credentials.c:cred_create_session_key(67) > clnt_chal_in: 156673FDB06F21B0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] libsmb/credentials.c:cred_create_session_key(68) > srv_chal_in : 8875810CDBF26CB9 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] libsmb/credentials.c:cred_create_session_key(69) > clnt+srv : 9DDBF4098B628E69 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] libsmb/credentials.c:cred_create_session_key(70) > sess_key_out : D0D5BEE013688350 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/credentials.c:creds_client_init(240) > creds_client_init: clnt : 047B3C68D6D424FE >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/credentials.c:creds_client_init(241) > creds_client_init: server : E19FB94D53C02CE8 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/credentials.c:creds_client_init(242) > creds_client_init: seed : 047B3C68D6D424FE >[2006/03/02 14:40:26, 4, effective(0, 1), real(0, 1)] rpc_client/cli_netlogon.c:rpccli_net_auth2(170) > cli_net_auth2: srv:\\10.64.197.46 acct:VMWSOL$ sc:2 mc: VMWSOL neg: 701ff >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_net.c:init_q_auth_2(800) > init_q_auth_2: 800 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_misc.c:init_log_info(1411) > make_log_info 1411 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_net.c:init_q_auth_2(806) > init_q_auth_2: 806 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_auth_2 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_log_info >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 undoc_buffer: 00000001 >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 unistr2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 uni_max_len: 0000000f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 offset : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c uni_str_len: 0000000f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0010 buffer : \.\.1.0...6.4...1.9.7...4.6... >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 00002e smb_io_unistr2 unistr2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 uni_max_len: 00000008 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 offset : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0038 uni_str_len: 00000008 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 003c buffer : V.M.W.S.O.L.$... >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 004c sec_chan: 0002 >[2006/03/02 14:40:26, 7, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 00004e smb_io_unistr2 unistr2 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0050 uni_max_len: 00000007 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0054 offset : 00000000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0058 uni_str_len: 00000007 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 005c buffer : V.M.W.S.O.L... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 00006a smb_io_chal >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 006a data: 04 7b 3c 68 d6 d4 24 fe >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000072 net_io_neg_flags >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0074 neg_flags: 000701ff >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0090 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000007 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000078 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 000f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \NETLOGON fnum 0x741f >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=226 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=14 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 144 (0x90) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 144 (0x90) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29727 (0x741F) > smb_bcc=159 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 90 00 00 00 07 00 00 00 78 ........ .......x > [020] 00 00 00 00 00 0F 00 01 00 00 00 0F 00 00 00 00 ........ ........ > [030] 00 00 00 0F 00 00 00 5C 00 5C 00 31 00 30 00 2E .......\ .\.1.0.. > [040] 00 36 00 34 00 2E 00 31 00 39 00 37 00 2E 00 34 .6.4...1 .9.7...4 > [050] 00 36 00 00 00 00 00 08 00 00 00 00 00 00 00 08 .6...... ........ > [060] 00 00 00 56 00 4D 00 57 00 53 00 4F 00 4C 00 24 ...V.M.W .S.O.L.$ > [070] 00 00 00 02 00 00 00 07 00 00 00 00 00 00 00 07 ........ ........ > [080] 00 00 00 56 00 4D 00 57 00 53 00 4F 00 4C 00 00 ...V.M.W .S.O.L.. > [090] 00 04 7B 3C 68 D6 D4 24 FE 00 00 FF 01 07 00 ..{<h..$ ....... >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,230) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,230) wrote 230 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 96 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=14 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 07 00 00 ........ .(...... > [010] 00 10 00 00 00 00 00 00 00 48 E3 FF BF C9 19 20 ........ .H..... > [020] 08 FF 01 00 40 22 00 00 C0 ....@".. . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=14 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 07 00 00 ........ .(...... > [010] 00 10 00 00 00 00 00 00 00 48 E3 FF BF C9 19 20 ........ .H..... > [020] 08 FF 01 00 40 22 00 00 C0 ....@".. . >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0028 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000007 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000010 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 40 at offset 0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine 10.64.197.46 pipe \NETLOGON fnum 0x741f returned 32 bytes. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_auth_2 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_chal >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint8s(819) > 0000 data: 48 e3 ff bf c9 19 20 08 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_debug(84) > 000008 net_io_neg_flags >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 neg_flags: 400001ff >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] rpc_parse/parse_prs.c:prs_ntstatus(762) > 000c status: NT_STATUS_ACCESS_DENIED >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] libsmb/trusts_util.c:just_change_the_password(57) > just_change_the_password: unable to setup creds (NT_STATUS_ACCESS_DENIED)! >[2006/03/02 14:40:26, 1, effective(0, 1), real(0, 1)] utils/net_rpc.c:run_rpc_command(169) > rpc command function failed! (NT_STATUS_ACCESS_DENIED) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,45) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,45) wrote 45 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=15 > smt_wct=0 > smb_bcc=0 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] libsmb/clientgen.c:cli_rpc_pipe_close(383) > cli_rpc_pipe_close: closed pipe \NETLOGON to machine 10.64.197.46 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,39) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,39) wrote 39 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=4349 > smb_uid=100 > smb_mid=16 > smt_wct=0 > smb_bcc=0 >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] libsmb/cliconnect.c:cli_start_connection(1389) > Connecting to host=10.64.197.46 >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] lib/util_sock.c:open_socket_out(870) > Connecting to 10.64.197.46 at port 445 >[2006/03/02 14:40:26, 2, effective(0, 1), real(0, 1)] lib/util_sock.c:open_socket_out(907) > error connecting to 10.64.197.46:445 (Connection refused) >[2006/03/02 14:40:26, 3, effective(0, 1), real(0, 1)] lib/util_sock.c:open_socket_out(870) > Connecting to 10.64.197.46 at port 139 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 49152 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 49640 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_SNDLOWAT. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_RCVLOWAT. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_SNDTIMEO. >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util_sock.c:print_socket_options(204) > Could not test socket option SO_RCVTIMEO. >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,72) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,72) wrote 72 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] libsmb/cliconnect.c:cli_session_request(1234) > Sent session request >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 0 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=0 > smb_com=0x0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=0 > smb_flg2=0 > smb_tid=0 > smb_pid=0 > smb_uid=0 > smb_mid=0 > smt_wct=0 > smb_bcc=0 >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(132) > write_socket(5,183) >[2006/03/02 14:40:26, 6, effective(0, 1), real(0, 1)] libsmb/clientgen.c:write_socket(135) > write_socket(5,183) wrote 183 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 127 >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=4349 > smb_uid=0 > smb_mid=2 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=61184 (0xEF00) > smb_vwv[ 8]= 25 (0x19) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]= 128 (0x80) > smb_vwv[12]=21528 (0x5418) > smb_vwv[13]=65267 (0xFEF3) > smb_vwv[14]=50749 (0xC63D) > smb_vwv[15]=50177 (0xC401) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 67 6C 70 6C 73 30 31 00 00 00 00 00 00 00 00 00 glpls01. ........ > [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... > [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... > [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(454) >[2006/03/02 14:40:26, 5, effective(0, 1), real(0, 1)] lib/util.c:show_msg(464) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=4349 > smb_uid=0 > smb_mid=2 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=61184 (0xEF00) > smb_vwv[ 8]= 25 (0x19) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]= 128 (0x80) > smb_vwv[12]=21528 (0x5418) > smb_vwv[13]=65267 (0xFEF3) > smb_vwv[14]=50749 (0xC63D) > smb_vwv[15]=50177 (0xC401) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2006/03/02 14:40:26, 10, effective(0, 1), real(0, 1)] lib/util.c:dump_data(2058) > [000] 67 6C 70 6C 73 30 31 00 00 00 00 00 00 00 00 00 glpls01. ........ > [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... > [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... > [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 3474
: 1767 |
1768