Attachment 185 Details for Bug 581 – Log level 10

Log level 10

log.smbd (text/plain), 296.45 KB, created by Joe Frisbie on 2003-10-07 07:04:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joe Frisbie

Created: 2003-10-07 07:04:49 UTC

Size: 296.45 KB

patch

obsolete

>[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_root_user(218)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2150 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6467
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 D8 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 80 62 8A A5 CD  ........ ....b...
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (742, 16269) - sec_ctx_stack_ndx = 0
>[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-1208164849-443131069-1473614131-2484
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-1208164849-443131069-1473614131-2484
>  SID[  1]: S-1-5-21-1208164849-443131069-1473614131-33539
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-1208164849-443131069-1473614131-1021
>  SID[  6]: S-1-5-21-1208164849-443131069-1473614131-1601
>  SID[  7]: S-1-5-21-1208164849-443131069-1473614131-1615
>[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 742
>  Primary group is 16269 and contains 5 supplementary groups
>  Group[  0]: 16269
>  Group[  1]: 16269
>  Group[  2]: 10
>  Group[  3]: 300
>  Group[  4]: 307
>[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_user(203)
>  change_to_user uid=(0,742) gid=(0,16269)
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Protect"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Protect (fnum 13016) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Tue Oct  7 08:22:17 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:22:17 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2151 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=6531
>  smt_wct=3
>  smb_vwv[ 0]=13016 (0x32D8)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13016
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13016 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=6531
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 194
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xc2
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2152 of length 198
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=194
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6595
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=27648 (0x6C00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=111
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 50  .r.o.s.o .f.t.\.P
>  [060] 00 72 00 6F 00 74 00 65  00 63 00 74 00 00 00     .r.o.t.e .c.t...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Protect"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8921, fnum = 13017 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Protect, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13017 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8922, fnum = 13018 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13018, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6595
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=55808 (0xDA00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2153 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6659
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 DA 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Protect"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Protect (fnum 13018) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Protect : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2154 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=6723
>  smt_wct=3
>  smb_vwv[ 0]=13018 (0x32DA)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13018
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13018 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=6723
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 240
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xf0
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2155 of length 244
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=240
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6787
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=39424 (0x9A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=157
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 49  .r.o.s.o .f.t.\.I
>  [060] 00 6E 00 74 00 65 00 72  00 6E 00 65 00 74 00 20  .n.t.e.r .n.e.t. 
>  [070] 00 45 00 78 00 70 00 6C  00 6F 00 72 00 65 00 72  .E.x.p.l .o.r.e.r
>  [080] 00 5C 00 51 00 75 00 69  00 63 00 6B 00 20 00 4C  .\.Q.u.i .c.k. .L
>  [090] 00 61 00 75 00 6E 00 63  00 68 00 00 00           .a.u.n.c .h...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8923, fnum = 13019 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13019 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8924, fnum = 13020 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13020, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6787
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=56320 (0xDC00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2156 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6851
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 DC 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13020) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2157 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=6915
>  smt_wct=3
>  smb_vwv[ 0]=13020 (0x32DC)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13020
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13020 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=6915
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 240
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xf0
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2158 of length 244
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=240
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6979
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=39424 (0x9A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=38400 (0x9600)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1536 (0x600)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=157
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 49  .r.o.s.o .f.t.\.I
>  [060] 00 6E 00 74 00 65 00 72  00 6E 00 65 00 74 00 20  .n.t.e.r .n.e.t. 
>  [070] 00 45 00 78 00 70 00 6C  00 6F 00 72 00 65 00 72  .E.x.p.l .o.r.e.r
>  [080] 00 5C 00 51 00 75 00 69  00 63 00 6B 00 20 00 4C  .\.Q.u.i .c.k. .L
>  [090] 00 61 00 75 00 6E 00 63  00 68 00 00 00           .a.u.n.c .h...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8925, fnum = 13021 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x1 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52)
>  fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, flags = 01 mode = 0700, fd = -1. Is a directory
>[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183)
>  Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (Is a directory) (local_flags=1) (flags=1)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13021 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8926, fnum = 13022 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13022, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=6979
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=56832 (0xDE00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2159 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7043
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 DE 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 01 2C 38 D0  ........ .....,8.
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13022) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Tue Oct  7 08:40:42 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:40:42 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2160 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7107
>  smt_wct=3
>  smb_vwv[ 0]=13022 (0x32DE)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13022
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13022 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7107
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 240
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xf0
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2161 of length 244
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=240
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7171
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=39424 (0x9A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=157
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 49  .r.o.s.o .f.t.\.I
>  [060] 00 6E 00 74 00 65 00 72  00 6E 00 65 00 74 00 20  .n.t.e.r .n.e.t. 
>  [070] 00 45 00 78 00 70 00 6C  00 6F 00 72 00 65 00 72  .E.x.p.l .o.r.e.r
>  [080] 00 5C 00 51 00 75 00 69  00 63 00 6B 00 20 00 4C  .\.Q.u.i .c.k. .L
>  [090] 00 61 00 75 00 6E 00 63  00 68 00 00 00           .a.u.n.c .h...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8927, fnum = 13023 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13023 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8928, fnum = 13024 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13024, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7171
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=57344 (0xE000)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2162 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7235
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 E0 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13024) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2163 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7299
>  smt_wct=3
>  smb_vwv[ 0]=13024 (0x32E0)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13024
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13024 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7299
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 214
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xd6
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2164 of length 218
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=214
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7363
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=32768 (0x8000)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=131
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 49  .r.o.s.o .f.t.\.I
>  [060] 00 6E 00 74 00 65 00 72  00 6E 00 65 00 74 00 20  .n.t.e.r .n.e.t. 
>  [070] 00 45 00 78 00 70 00 6C  00 6F 00 72 00 65 00 72  .E.x.p.l .o.r.e.r
>  [080] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8929, fnum = 13025 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13025 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8930, fnum = 13026 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13026, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7363
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=57856 (0xE200)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2165 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7427
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 E2 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13026) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2166 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7491
>  smt_wct=3
>  smb_vwv[ 0]=13026 (0x32E2)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13026
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13026 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7491
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 214
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xd6
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2167 of length 218
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=214
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7555
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=32768 (0x8000)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=38400 (0x9600)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1536 (0x600)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=131
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 49  .r.o.s.o .f.t.\.I
>  [060] 00 6E 00 74 00 65 00 72  00 6E 00 65 00 74 00 20  .n.t.e.r .n.e.t. 
>  [070] 00 45 00 78 00 70 00 6C  00 6F 00 72 00 65 00 72  .E.x.p.l .o.r.e.r
>  [080] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8931, fnum = 13027 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x1 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52)
>  fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, flags = 01 mode = 0700, fd = -1. Is a directory
>[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183)
>  Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (Is a directory) (local_flags=1) (flags=1)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13027 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8932, fnum = 13028 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13028, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7555
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=58368 (0xE400)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2168 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7619
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 E4 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 01 2C 38 D0  ........ .....,8.
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13028) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Tue Oct  7 08:40:42 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:40:42 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2169 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7683
>  smt_wct=3
>  smb_vwv[ 0]=13028 (0x32E4)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13028
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13028 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7683
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 214
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xd6
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2170 of length 218
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=214
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7747
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=32768 (0x8000)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=131
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 49  .r.o.s.o .f.t.\.I
>  [060] 00 6E 00 74 00 65 00 72  00 6E 00 65 00 74 00 20  .n.t.e.r .n.e.t. 
>  [070] 00 45 00 78 00 70 00 6C  00 6F 00 72 00 65 00 72  .E.x.p.l .o.r.e.r
>  [080] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8933, fnum = 13029 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13029 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8934, fnum = 13030 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13030, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7747
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=58880 (0xE600)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2171 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7811
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 E6 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13030) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2172 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7875
>  smt_wct=3
>  smb_vwv[ 0]=13030 (0x32E6)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13030
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13030 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=7875
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 238
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xee
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2173 of length 242
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=238
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7939
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=38912 (0x9800)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=155
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 43  .r.o.s.o .f.t.\.C
>  [060] 00 4C 00 52 00 20 00 53  00 65 00 63 00 75 00 72  .L.R. .S .e.c.u.r
>  [070] 00 69 00 74 00 79 00 20  00 43 00 6F 00 6E 00 66  .i.t.y.  .C.o.n.f
>  [080] 00 69 00 67 00 5C 00 76  00 31 00 2E 00 30 00 2E  .i.g.\.v .1...0..
>  [090] 00 33 00 37 00 30 00 35  00 00 00                 .3.7.0.5 ...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8935, fnum = 13031 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13031 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8936, fnum = 13032 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13032, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=7939
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=59392 (0xE800)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2174 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8003
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 E8 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13032) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2175 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8067
>  smt_wct=3
>  smb_vwv[ 0]=13032 (0x32E8)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13032
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13032 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8067
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 238
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xee
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2176 of length 242
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=238
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8131
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=38912 (0x9800)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=38400 (0x9600)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1536 (0x600)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=155
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 43  .r.o.s.o .f.t.\.C
>  [060] 00 4C 00 52 00 20 00 53  00 65 00 63 00 75 00 72  .L.R. .S .e.c.u.r
>  [070] 00 69 00 74 00 79 00 20  00 43 00 6F 00 6E 00 66  .i.t.y.  .C.o.n.f
>  [080] 00 69 00 67 00 5C 00 76  00 31 00 2E 00 30 00 2E  .i.g.\.v .1...0..
>  [090] 00 33 00 37 00 30 00 35  00 00 00                 .3.7.0.5 ...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8937, fnum = 13033 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x1 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52)
>  fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, flags = 01 mode = 0700, fd = -1. Is a directory
>[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183)
>  Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (Is a directory) (local_flags=1) (flags=1)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13033 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8938, fnum = 13034 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13034, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8131
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=59904 (0xEA00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2177 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8195
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 EA 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 F9 22 A6 CD  ........ ....."..
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13034) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Tue Oct  7 08:22:18 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:22:18 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2178 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8259
>  smt_wct=3
>  smb_vwv[ 0]=13034 (0x32EA)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13034
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13034 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8259
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 238
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xee
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2179 of length 242
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=238
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8323
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=38912 (0x9800)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=155
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 43  .r.o.s.o .f.t.\.C
>  [060] 00 4C 00 52 00 20 00 53  00 65 00 63 00 75 00 72  .L.R. .S .e.c.u.r
>  [070] 00 69 00 74 00 79 00 20  00 43 00 6F 00 6E 00 66  .i.t.y.  .C.o.n.f
>  [080] 00 69 00 67 00 5C 00 76  00 31 00 2E 00 30 00 2E  .i.g.\.v .1...0..
>  [090] 00 33 00 37 00 30 00 35  00 00 00                 .3.7.0.5 ...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8939, fnum = 13035 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13035 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8940, fnum = 13036 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13036, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8323
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=60416 (0xEC00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=55294 (0xD7FE)
>  smb_vwv[15]=55765 (0xD9D5)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=55294 (0xD7FE)
>  smb_vwv[19]=55765 (0xD9D5)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2180 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8387
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 EC 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13036) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2181 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8451
>  smt_wct=3
>  smb_vwv[ 0]=13036 (0x32EC)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13036
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13036 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8451
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 218
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xda
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2182 of length 222
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=218
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8515
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=33792 (0x8400)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=135
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 43  .r.o.s.o .f.t.\.C
>  [060] 00 4C 00 52 00 20 00 53  00 65 00 63 00 75 00 72  .L.R. .S .e.c.u.r
>  [070] 00 69 00 74 00 79 00 20  00 43 00 6F 00 6E 00 66  .i.t.y.  .C.o.n.f
>  [080] 00 69 00 67 00 00 00                              .i.g... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8941, fnum = 13037 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13037 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8942, fnum = 13038 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13038, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8515
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=60928 (0xEE00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2183 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8579
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 EE 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13038) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2184 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8643
>  smt_wct=3
>  smb_vwv[ 0]=13038 (0x32EE)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13038
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13038 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8643
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 218
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xda
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2185 of length 222
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=218
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8707
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=33792 (0x8400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=38400 (0x9600)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1536 (0x600)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=135
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 43  .r.o.s.o .f.t.\.C
>  [060] 00 4C 00 52 00 20 00 53  00 65 00 63 00 75 00 72  .L.R. .S .e.c.u.r
>  [070] 00 69 00 74 00 79 00 20  00 43 00 6F 00 6E 00 66  .i.t.y.  .C.o.n.f
>  [080] 00 69 00 67 00 00 00                              .i.g... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8943, fnum = 13039 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x1 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52)
>  fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, flags = 01 mode = 0700, fd = -1. Is a directory
>[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183)
>  Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (Is a directory) (local_flags=1) (flags=1)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13039 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8944, fnum = 13040 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13040, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8707
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=61440 (0xF000)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2186 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8771
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 F0 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 80 62 8A A5 CD  ........ ....b...
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13040) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Tue Oct  7 08:22:17 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:22:17 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2187 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8835
>  smt_wct=3
>  smb_vwv[ 0]=13040 (0x32F0)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13040
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13040 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=8835
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 218
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xda
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2188 of length 222
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=218
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8899
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=33792 (0x8400)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=135
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 5C 00 43  .r.o.s.o .f.t.\.C
>  [060] 00 4C 00 52 00 20 00 53  00 65 00 63 00 75 00 72  .L.R. .S .e.c.u.r
>  [070] 00 69 00 74 00 79 00 20  00 43 00 6F 00 6E 00 66  .i.t.y.  .C.o.n.f
>  [080] 00 69 00 67 00 00 00                              .i.g... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8945, fnum = 13041 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13041 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8946, fnum = 13042 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13042, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8899
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=61952 (0xF200)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2189 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=8963
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 F2 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13042) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2190 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9027
>  smt_wct=3
>  smb_vwv[ 0]=13042 (0x32F2)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13042
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13042 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9027
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 178
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xb2
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2191 of length 182
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=178
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9091
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=23552 (0x5C00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=95
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 00 00     .r.o.s.o .f.t...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8947, fnum = 13043 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13043 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8948, fnum = 13044 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13044, open name = %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9091
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=62464 (0xF400)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=32768 (0x8000)
>  smb_vwv[ 6]=31411 (0x7AB3)
>  smb_vwv[ 7]=55760 (0xD9D0)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=31411 (0x7AB3)
>  smb_vwv[11]=55760 (0xD9D0)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2192 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9155
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 F4 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13044) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:23 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2193 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9219
>  smt_wct=3
>  smb_vwv[ 0]=13044 (0x32F4)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13044
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13044 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9219
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 178
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xb2
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2194 of length 182
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=178
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9283
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=23552 (0x5C00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=38400 (0x9600)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1536 (0x600)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=95
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 00 00     .r.o.s.o .f.t...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8949, fnum = 13045 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x1 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52)
>  fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft, flags = 01 mode = 0700, fd = -1. Is a directory
>[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183)
>  Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft (Is a directory) (local_flags=1) (flags=1)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13045 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8950, fnum = 13046 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13046, open name = %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9283
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=62976 (0xF600)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=32768 (0x8000)
>  smb_vwv[ 6]=31411 (0x7AB3)
>  smb_vwv[ 7]=55760 (0xD9D0)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=31411 (0x7AB3)
>  smb_vwv[11]=55760 (0xD9D0)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2195 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9347
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 F6 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 80 62 8A A5 CD  ........ ....b...
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13046) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:23 2003
>   modtime: Tue Oct  7 08:22:17 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:22:17 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2196 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9411
>  smt_wct=3
>  smb_vwv[ 0]=13046 (0x32F6)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13046
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13046 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9411
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 178
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xb2
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2197 of length 182
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=178
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9475
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=23552 (0x5C00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=95
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 4D 00 69 00 63  .D.a.t.a .\.M.i.c
>  [050] 00 72 00 6F 00 73 00 6F  00 66 00 74 00 00 00     .r.o.s.o .f.t...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8951, fnum = 13047 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13047 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8952, fnum = 13048 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13048, open name = %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9475
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=63488 (0xF800)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=32768 (0x8000)
>  smb_vwv[ 6]=31411 (0x7AB3)
>  smb_vwv[ 7]=55760 (0xD9D0)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=31411 (0x7AB3)
>  smb_vwv[11]=55760 (0xD9D0)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2198 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9539
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 F8 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13048) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:23 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2199 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9603
>  smt_wct=3
>  smb_vwv[ 0]=13048 (0x32F8)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13048
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13048 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9603
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_root_user(218)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 258
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x102
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2200 of length 262
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=258
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9667
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=44032 (0xAC00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=175
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 49 00 64 00 65  .D.a.t.a .\.I.d.e
>  [050] 00 6E 00 74 00 69 00 74  00 69 00 65 00 73 00 5C  .n.t.i.t .i.e.s.\
>  [060] 00 7B 00 32 00 30 00 35  00 43 00 30 00 30 00 45  .{.2.0.5 .C.0.0.E
>  [070] 00 33 00 2D 00 37 00 43  00 43 00 34 00 2D 00 34  .3.-.7.C .C.4.-.4
>  [080] 00 43 00 41 00 43 00 2D  00 42 00 44 00 31 00 42  .C.A.C.- .B.D.1.B
>  [090] 00 2D 00 31 00 45 00 31  00 35 00 45 00 34 00 44  .-.1.E.1 .5.E.4.D
>  [0A0] 00 31 00 32 00 34 00 31  00 46 00 7D 00 00 00     .1.2.4.1 .F.}...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (742, 16269) - sec_ctx_stack_ndx = 0
>[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-1208164849-443131069-1473614131-2484
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-1208164849-443131069-1473614131-2484
>  SID[  1]: S-1-5-21-1208164849-443131069-1473614131-33539
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-1208164849-443131069-1473614131-1021
>  SID[  6]: S-1-5-21-1208164849-443131069-1473614131-1601
>  SID[  7]: S-1-5-21-1208164849-443131069-1473614131-1615
>[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 742
>  Primary group is 16269 and contains 5 supplementary groups
>  Group[  0]: 16269
>  Group[  1]: 16269
>  Group[  2]: 10
>  Group[  3]: 300
>  Group[  4]: 307
>[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_user(203)
>  change_to_user uid=(0,742) gid=(0,16269)
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8953, fnum = 13049 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13049 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8954, fnum = 13050 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13050, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9667
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=64000 (0xFA00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2201 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9731
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 FA 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13050) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2202 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9795
>  smt_wct=3
>  smb_vwv[ 0]=13050 (0x32FA)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13050
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13050 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9795
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 258
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x102
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2203 of length 262
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=258
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9859
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=44032 (0xAC00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=38400 (0x9600)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1536 (0x600)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=175
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 49 00 64 00 65  .D.a.t.a .\.I.d.e
>  [050] 00 6E 00 74 00 69 00 74  00 69 00 65 00 73 00 5C  .n.t.i.t .i.e.s.\
>  [060] 00 7B 00 32 00 30 00 35  00 43 00 30 00 30 00 45  .{.2.0.5 .C.0.0.E
>  [070] 00 33 00 2D 00 37 00 43  00 43 00 34 00 2D 00 34  .3.-.7.C .C.4.-.4
>  [080] 00 43 00 41 00 43 00 2D  00 42 00 44 00 31 00 42  .C.A.C.- .B.D.1.B
>  [090] 00 2D 00 31 00 45 00 31  00 35 00 45 00 34 00 44  .-.1.E.1 .5.E.4.D
>  [0A0] 00 31 00 32 00 34 00 31  00 46 00 7D 00 00 00     .1.2.4.1 .F.}...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8955, fnum = 13051 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x1 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52)
>  fd_open: name %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, flags = 01 mode = 0700, fd = -1. Is a directory
>[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183)
>  Error opening file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (Is a directory) (local_flags=1) (flags=1)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13051 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8956, fnum = 13052 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13052, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9859
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=64512 (0xFC00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2204 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=9923
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 FC 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 80 62 8A A5 CD  ........ ....b...
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13052) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Tue Oct  7 08:22:17 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:22:17 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2205 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9987
>  smt_wct=3
>  smb_vwv[ 0]=13052 (0x32FC)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13052
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13052 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=9987
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 258
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x102
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2206 of length 262
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=258
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10051
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=44032 (0xAC00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=175
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 49 00 64 00 65  .D.a.t.a .\.I.d.e
>  [050] 00 6E 00 74 00 69 00 74  00 69 00 65 00 73 00 5C  .n.t.i.t .i.e.s.\
>  [060] 00 7B 00 32 00 30 00 35  00 43 00 30 00 30 00 45  .{.2.0.5 .C.0.0.E
>  [070] 00 33 00 2D 00 37 00 43  00 43 00 34 00 2D 00 34  .3.-.7.C .C.4.-.4
>  [080] 00 43 00 41 00 43 00 2D  00 42 00 44 00 31 00 42  .C.A.C.- .B.D.1.B
>  [090] 00 2D 00 31 00 45 00 31  00 35 00 45 00 34 00 44  .-.1.E.1 .5.E.4.D
>  [0A0] 00 31 00 32 00 34 00 31  00 46 00 7D 00 00 00     .1.2.4.1 .F.}...
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8957, fnum = 13053 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13053 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8958, fnum = 13054 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13054, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10051
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65024 (0xFE00)
>  smb_vwv[ 3]=  306 (0x132)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2207 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10115
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 66 00 FE 32 EC 03 00  00 72 00 00 00 00 00 00  .f..2... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13054) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2208 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=10179
>  smt_wct=3
>  smb_vwv[ 0]=13054 (0x32FE)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13054
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13054 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=10179
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 180
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xb4
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2209 of length 184
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=180
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10243
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=24064 (0x5E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=97
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 49 00 64 00 65  .D.a.t.a .\.I.d.e
>  [050] 00 6E 00 74 00 69 00 74  00 69 00 65 00 73 00 00  .n.t.i.t .i.e.s..
>  [060] 00                                                . 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8959, fnum = 13055 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13055 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8960, fnum = 13056 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13056, open name = %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10243
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  307 (0x133)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2210 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10307
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 69 00 00 33 EC 03 00  00 72 00 00 00 00 00 00  .i..3... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13056) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2211 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=10371
>  smt_wct=3
>  smb_vwv[ 0]=13056 (0x3300)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13056
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13056 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=10371
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 180
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xb4
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2212 of length 184
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=180
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10435
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=24064 (0x5E00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=38400 (0x9600)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1536 (0x600)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=97
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 49 00 64 00 65  .D.a.t.a .\.I.d.e
>  [050] 00 6E 00 74 00 69 00 74  00 69 00 65 00 73 00 00  .n.t.i.t .i.e.s..
>  [060] 00                                                . 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8961, fnum = 13057 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x1 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52)
>  fd_open: name %u_bombur_%H_Win2K/Application Data/Identities, flags = 01 mode = 0700, fd = -1. Is a directory
>[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183)
>  Error opening file %u_bombur_%H_Win2K/Application Data/Identities (Is a directory) (local_flags=1) (flags=1)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13057 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8962, fnum = 13058 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13058, open name = %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10435
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=  512 (0x200)
>  smb_vwv[ 3]=  307 (0x133)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2213 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10499
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 69 00 02 33 EC 03 00  00 72 00 00 00 00 00 00  .i..3... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 80 62 8A A5 CD  ........ ....b...
>  [020] 8C C3 01 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13058) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Tue Oct  7 08:22:17 2003
>   size: 0 dosmode: 0
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072)
>  call_trans2setfilepathinfo: setting pending modtime to Tue Oct  7 08:22:17 2003
>  
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2214 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=10563
>  smt_wct=3
>  smb_vwv[ 0]=13058 (0x3302)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13058
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13058 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=10563
>  smt_wct=0
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,39)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,39) wrote 39
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 180
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xb4
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2215 of length 184
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=180
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10627
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=24064 (0x5E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=97
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 5C 00 25 00 75 00 5F  00 62 00 6F 00 6D 00 62  .\.%.u._ .b.o.m.b
>  [010] 00 75 00 72 00 5F 00 25  00 48 00 5F 00 57 00 69  .u.r._.% .H._.W.i
>  [020] 00 6E 00 32 00 4B 00 5C  00 41 00 70 00 70 00 6C  .n.2.K.\ .A.p.p.l
>  [030] 00 69 00 63 00 61 00 74  00 69 00 6F 00 6E 00 20  .i.c.a.t .i.o.n. 
>  [040] 00 44 00 61 00 74 00 61  00 5C 00 49 00 64 00 65  .D.a.t.a .\.I.d.e
>  [050] 00 6E 00 74 00 69 00 74  00 69 00 65 00 73 00 00  .n.t.i.t .i.e.s..
>  [060] 00                                                . 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597)
>  reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424)
>  map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000
>[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469)
>  map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8963, fnum = 13059 (1 used)
>[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848)
>  open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014)
>  calling open_file with flags=0x0 flags2=0x0 mode=0700
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13059 (0 used)
>[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122)
>  allocated file structure 8964, fnum = 13060 (1 used)
>[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355)
>  open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953)
>  reply_ntcreate_and_X: fnum = 13060, open name = %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10627
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 1024 (0x400)
>  smb_vwv[ 3]=  307 (0x133)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 4938 (0x134A)
>  smb_vwv[ 7]=55761 (0xD9D1)
>  smb_vwv[ 8]=50060 (0xC38C)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]= 4938 (0x134A)
>  smb_vwv[11]=55761 (0xD9D1)
>  smb_vwv[12]=50060 (0xC38C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 4938 (0x134A)
>  smb_vwv[15]=55761 (0xD9D1)
>  smb_vwv[16]=50060 (0xC38C)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 4938 (0x134A)
>  smb_vwv[19]=55761 (0xD9D1)
>  smb_vwv[20]=50060 (0xC38C)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]=    0 (0x0)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,107)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,107) wrote 107
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 116
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x74
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2216 of length 120
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=212
>  smb_uid=102
>  smb_mid=10691
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825)
>  [000] 00 69 00 04 33 EC 03 00  00 72 00 00 00 00 00 00  .i..3... .r......
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 80 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities"
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580)
>  unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities]
>[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551)
>  call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13060) info_level=1004 totdata=40
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031)
>  actime: Tue Oct  7 09:49:24 2003
>   modtime: Wed Dec 31 19:00:00 1969
>   size: 0 dosmode: 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088)
>  call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities : setting dos mode 90
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122)
>  dos_mode: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473)
>  is_in_path: %u_bombur_%H_Win2K/Application Data/Identities
>[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477)
>  is_in_path: no name list.
>[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168)
>  dos_mode returning d
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data
>[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700
>[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110)
>  unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 040700
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407)
>  write_socket(19,62)
>[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410)
>  write_socket(19,62) wrote 62
>[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
>  got smb length of 41
>[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890)
>  Transaction 2217 of length 45
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=10755
>  smt_wct=3
>  smb_vwv[ 0]=13060 (0x3304)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 28556)
>[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122)
>  change_to_user: Skipping user change - already user
>[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449)
>  close directory fnum=13060
>[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385)
>  freed files structure 13060 (0 used)
>[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)

Actions: View

Attachments on bug 581: 184 | 185 | 186