The Samba-Bugzilla – Attachment 185 Details for
Bug 581
%u and %H variable substitution don't work for login path
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Log level 10
log.smbd (text/plain), 296.45 KB, created by
Joe Frisbie
on 2003-10-07 07:04:49 UTC
(
hide
)
Description:
Log level 10
Filename:
MIME Type:
Creator:
Joe Frisbie
Created:
2003-10-07 07:04:49 UTC
Size:
296.45 KB
patch
obsolete
>[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_root_user(218) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2150 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6467 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 D8 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (742, 16269) - sec_ctx_stack_ndx = 0 >[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(491) > NT user token of user S-1-5-21-1208164849-443131069-1473614131-2484 > contains 8 SIDs > SID[ 0]: S-1-5-21-1208164849-443131069-1473614131-2484 > SID[ 1]: S-1-5-21-1208164849-443131069-1473614131-33539 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-1208164849-443131069-1473614131-1021 > SID[ 6]: S-1-5-21-1208164849-443131069-1473614131-1601 > SID[ 7]: S-1-5-21-1208164849-443131069-1473614131-1615 >[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 742 > Primary group is 16269 and contains 5 supplementary groups > Group[ 0]: 16269 > Group[ 1]: 16269 > Group[ 2]: 10 > Group[ 3]: 300 > Group[ 4]: 307 >[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_user(203) > change_to_user uid=(0,742) gid=(0,16269) >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Protect" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Protect (fnum 13016) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Tue Oct 7 08:22:17 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2151 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=6531 > smt_wct=3 > smb_vwv[ 0]=13016 (0x32D8) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13016 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13016 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=6531 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 194 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xc2 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2152 of length 198 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=194 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6595 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=27648 (0x6C00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=111 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 50 .r.o.s.o .f.t.\.P > [060] 00 72 00 6F 00 74 00 65 00 63 00 74 00 00 00 .r.o.t.e .c.t... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Protect" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8921, fnum = 13017 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Protect, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13017 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8922, fnum = 13018 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13018, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6595 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=55808 (0xDA00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2153 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6659 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 DA 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Protect" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Protect (fnum 13018) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Protect : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2154 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=6723 > smt_wct=3 > smb_vwv[ 0]=13018 (0x32DA) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13018 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13018 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=6723 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 240 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xf0 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2155 of length 244 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=240 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6787 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=39424 (0x9A00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=157 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I > [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. > [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r > [080] 00 5C 00 51 00 75 00 69 00 63 00 6B 00 20 00 4C .\.Q.u.i .c.k. .L > [090] 00 61 00 75 00 6E 00 63 00 68 00 00 00 .a.u.n.c .h... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8923, fnum = 13019 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13019 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8924, fnum = 13020 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13020, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6787 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=56320 (0xDC00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2156 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6851 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 DC 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13020) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2157 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=6915 > smt_wct=3 > smb_vwv[ 0]=13020 (0x32DC) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13020 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13020 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=6915 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 240 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xf0 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2158 of length 244 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=240 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6979 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=39424 (0x9A00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=38400 (0x9600) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1536 (0x600) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=157 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I > [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. > [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r > [080] 00 5C 00 51 00 75 00 69 00 63 00 6B 00 20 00 4C .\.Q.u.i .c.k. .L > [090] 00 61 00 75 00 6E 00 63 00 68 00 00 00 .a.u.n.c .h... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8925, fnum = 13021 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x1 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) > fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, flags = 01 mode = 0700, fd = -1. Is a directory >[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) > Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (Is a directory) (local_flags=1) (flags=1) >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13021 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8926, fnum = 13022 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13022, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=6979 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=56832 (0xDE00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2159 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7043 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 DE 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 01 2C 38 D0 ........ .....,8. > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13022) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Tue Oct 7 08:40:42 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:40:42 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2160 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7107 > smt_wct=3 > smb_vwv[ 0]=13022 (0x32DE) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13022 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13022 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7107 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 240 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xf0 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2161 of length 244 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=240 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7171 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=39424 (0x9A00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=157 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I > [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. > [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r > [080] 00 5C 00 51 00 75 00 69 00 63 00 6B 00 20 00 4C .\.Q.u.i .c.k. .L > [090] 00 61 00 75 00 6E 00 63 00 68 00 00 00 .a.u.n.c .h... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8927, fnum = 13023 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13023 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8928, fnum = 13024 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13024, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7171 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=57344 (0xE000) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2162 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7235 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 E0 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13024) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2163 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7299 > smt_wct=3 > smb_vwv[ 0]=13024 (0x32E0) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13024 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13024 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7299 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 214 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xd6 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2164 of length 218 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=214 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7363 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=32768 (0x8000) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=131 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I > [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. > [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r > [080] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8929, fnum = 13025 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13025 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8930, fnum = 13026 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13026, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7363 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=57856 (0xE200) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2165 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7427 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 E2 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13026) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2166 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7491 > smt_wct=3 > smb_vwv[ 0]=13026 (0x32E2) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13026 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13026 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7491 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 214 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xd6 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2167 of length 218 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=214 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7555 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=32768 (0x8000) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=38400 (0x9600) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1536 (0x600) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=131 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I > [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. > [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r > [080] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8931, fnum = 13027 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x1 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) > fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, flags = 01 mode = 0700, fd = -1. Is a directory >[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) > Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (Is a directory) (local_flags=1) (flags=1) >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13027 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8932, fnum = 13028 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13028, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7555 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=58368 (0xE400) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2168 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7619 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 E4 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 01 2C 38 D0 ........ .....,8. > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13028) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Tue Oct 7 08:40:42 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:40:42 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2169 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7683 > smt_wct=3 > smb_vwv[ 0]=13028 (0x32E4) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13028 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13028 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7683 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 214 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xd6 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2170 of length 218 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=214 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7747 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=32768 (0x8000) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=131 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I > [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. > [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r > [080] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8933, fnum = 13029 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13029 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8934, fnum = 13030 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13030, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7747 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=58880 (0xE600) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2171 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7811 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 E6 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13030) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2172 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7875 > smt_wct=3 > smb_vwv[ 0]=13030 (0x32E6) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13030 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13030 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=7875 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 238 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xee >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2173 of length 242 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=238 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7939 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=38912 (0x9800) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=155 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C > [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r > [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f > [080] 00 69 00 67 00 5C 00 76 00 31 00 2E 00 30 00 2E .i.g.\.v .1...0.. > [090] 00 33 00 37 00 30 00 35 00 00 00 .3.7.0.5 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8935, fnum = 13031 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13031 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8936, fnum = 13032 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13032, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=7939 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=59392 (0xE800) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2174 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8003 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 E8 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13032) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2175 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8067 > smt_wct=3 > smb_vwv[ 0]=13032 (0x32E8) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13032 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13032 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8067 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 238 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xee >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2176 of length 242 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=238 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8131 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=38912 (0x9800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=38400 (0x9600) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1536 (0x600) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=155 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C > [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r > [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f > [080] 00 69 00 67 00 5C 00 76 00 31 00 2E 00 30 00 2E .i.g.\.v .1...0.. > [090] 00 33 00 37 00 30 00 35 00 00 00 .3.7.0.5 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8937, fnum = 13033 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x1 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) > fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, flags = 01 mode = 0700, fd = -1. Is a directory >[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) > Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (Is a directory) (local_flags=1) (flags=1) >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13033 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8938, fnum = 13034 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13034, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8131 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=59904 (0xEA00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2177 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8195 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 EA 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 F9 22 A6 CD ........ .....".. > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13034) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Tue Oct 7 08:22:18 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:18 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2178 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8259 > smt_wct=3 > smb_vwv[ 0]=13034 (0x32EA) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13034 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13034 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8259 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 238 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xee >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2179 of length 242 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=238 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8323 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=38912 (0x9800) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=155 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C > [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r > [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f > [080] 00 69 00 67 00 5C 00 76 00 31 00 2E 00 30 00 2E .i.g.\.v .1...0.. > [090] 00 33 00 37 00 30 00 35 00 00 00 .3.7.0.5 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8939, fnum = 13035 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13035 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8940, fnum = 13036 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13036, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8323 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=60416 (0xEC00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]=55294 (0xD7FE) > smb_vwv[15]=55765 (0xD9D5) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]=55294 (0xD7FE) > smb_vwv[19]=55765 (0xD9D5) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2180 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8387 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 EC 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13036) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2181 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8451 > smt_wct=3 > smb_vwv[ 0]=13036 (0x32EC) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13036 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13036 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8451 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 218 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xda >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2182 of length 222 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=218 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8515 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=33792 (0x8400) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=135 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C > [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r > [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f > [080] 00 69 00 67 00 00 00 .i.g... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8941, fnum = 13037 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13037 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8942, fnum = 13038 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13038, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8515 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=60928 (0xEE00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2183 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8579 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 EE 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13038) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2184 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8643 > smt_wct=3 > smb_vwv[ 0]=13038 (0x32EE) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13038 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13038 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8643 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 218 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xda >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2185 of length 222 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=218 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8707 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=33792 (0x8400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=38400 (0x9600) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1536 (0x600) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=135 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C > [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r > [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f > [080] 00 69 00 67 00 00 00 .i.g... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8943, fnum = 13039 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x1 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) > fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, flags = 01 mode = 0700, fd = -1. Is a directory >[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) > Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (Is a directory) (local_flags=1) (flags=1) >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13039 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8944, fnum = 13040 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13040, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8707 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=61440 (0xF000) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2186 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8771 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 F0 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13040) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Tue Oct 7 08:22:17 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2187 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8835 > smt_wct=3 > smb_vwv[ 0]=13040 (0x32F0) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13040 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13040 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=8835 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 218 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xda >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2188 of length 222 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=218 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8899 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=33792 (0x8400) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=135 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C > [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r > [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f > [080] 00 69 00 67 00 00 00 .i.g... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8945, fnum = 13041 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13041 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8946, fnum = 13042 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13042, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8899 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=61952 (0xF200) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2189 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=8963 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 F2 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13042) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2190 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9027 > smt_wct=3 > smb_vwv[ 0]=13042 (0x32F2) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13042 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13042 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9027 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 178 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xb2 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2191 of length 182 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9091 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 00 00 .r.o.s.o .f.t... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8947, fnum = 13043 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13043 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8948, fnum = 13044 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13044, open name = %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9091 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=62464 (0xF400) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=31411 (0x7AB3) > smb_vwv[ 7]=55760 (0xD9D0) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=31411 (0x7AB3) > smb_vwv[11]=55760 (0xD9D0) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2192 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9155 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 F4 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13044) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:23 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2193 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9219 > smt_wct=3 > smb_vwv[ 0]=13044 (0x32F4) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13044 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13044 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9219 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 178 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xb2 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2194 of length 182 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9283 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=38400 (0x9600) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1536 (0x600) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=95 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 00 00 .r.o.s.o .f.t... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8949, fnum = 13045 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x1 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) > fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft, flags = 01 mode = 0700, fd = -1. Is a directory >[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) > Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft (Is a directory) (local_flags=1) (flags=1) >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13045 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8950, fnum = 13046 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13046, open name = %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9283 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=62976 (0xF600) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=31411 (0x7AB3) > smb_vwv[ 7]=55760 (0xD9D0) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=31411 (0x7AB3) > smb_vwv[11]=55760 (0xD9D0) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2195 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9347 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 F6 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13046) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:23 2003 > modtime: Tue Oct 7 08:22:17 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2196 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9411 > smt_wct=3 > smb_vwv[ 0]=13046 (0x32F6) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13046 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13046 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9411 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 178 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xb2 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2197 of length 182 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9475 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c > [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 00 00 .r.o.s.o .f.t... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8951, fnum = 13047 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13047 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8952, fnum = 13048 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13048, open name = %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9475 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=63488 (0xF800) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=31411 (0x7AB3) > smb_vwv[ 7]=55760 (0xD9D0) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=31411 (0x7AB3) > smb_vwv[11]=55760 (0xD9D0) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2198 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9539 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 F8 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13048) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:23 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2199 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9603 > smt_wct=3 > smb_vwv[ 0]=13048 (0x32F8) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13048 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13048 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9603 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_root_user(218) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 258 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x102 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2200 of length 262 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=258 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9667 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=44032 (0xAC00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=175 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e > [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 5C .n.t.i.t .i.e.s.\ > [060] 00 7B 00 32 00 30 00 35 00 43 00 30 00 30 00 45 .{.2.0.5 .C.0.0.E > [070] 00 33 00 2D 00 37 00 43 00 43 00 34 00 2D 00 34 .3.-.7.C .C.4.-.4 > [080] 00 43 00 41 00 43 00 2D 00 42 00 44 00 31 00 42 .C.A.C.- .B.D.1.B > [090] 00 2D 00 31 00 45 00 31 00 35 00 45 00 34 00 44 .-.1.E.1 .5.E.4.D > [0A0] 00 31 00 32 00 34 00 31 00 46 00 7D 00 00 00 .1.2.4.1 .F.}... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (742, 16269) - sec_ctx_stack_ndx = 0 >[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(491) > NT user token of user S-1-5-21-1208164849-443131069-1473614131-2484 > contains 8 SIDs > SID[ 0]: S-1-5-21-1208164849-443131069-1473614131-2484 > SID[ 1]: S-1-5-21-1208164849-443131069-1473614131-33539 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-1208164849-443131069-1473614131-1021 > SID[ 6]: S-1-5-21-1208164849-443131069-1473614131-1601 > SID[ 7]: S-1-5-21-1208164849-443131069-1473614131-1615 >[2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 742 > Primary group is 16269 and contains 5 supplementary groups > Group[ 0]: 16269 > Group[ 1]: 16269 > Group[ 2]: 10 > Group[ 3]: 300 > Group[ 4]: 307 >[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_user(203) > change_to_user uid=(0,742) gid=(0,16269) >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8953, fnum = 13049 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13049 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8954, fnum = 13050 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13050, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9667 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=64000 (0xFA00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2201 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9731 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 FA 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13050) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2202 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9795 > smt_wct=3 > smb_vwv[ 0]=13050 (0x32FA) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13050 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13050 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9795 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 258 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x102 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2203 of length 262 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=258 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9859 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=44032 (0xAC00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=38400 (0x9600) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1536 (0x600) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=175 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e > [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 5C .n.t.i.t .i.e.s.\ > [060] 00 7B 00 32 00 30 00 35 00 43 00 30 00 30 00 45 .{.2.0.5 .C.0.0.E > [070] 00 33 00 2D 00 37 00 43 00 43 00 34 00 2D 00 34 .3.-.7.C .C.4.-.4 > [080] 00 43 00 41 00 43 00 2D 00 42 00 44 00 31 00 42 .C.A.C.- .B.D.1.B > [090] 00 2D 00 31 00 45 00 31 00 35 00 45 00 34 00 44 .-.1.E.1 .5.E.4.D > [0A0] 00 31 00 32 00 34 00 31 00 46 00 7D 00 00 00 .1.2.4.1 .F.}... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8955, fnum = 13051 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x1 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) > fd_open: name %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, flags = 01 mode = 0700, fd = -1. Is a directory >[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) > Error opening file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (Is a directory) (local_flags=1) (flags=1) >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13051 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8956, fnum = 13052 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13052, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9859 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=64512 (0xFC00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2204 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=9923 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 FC 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13052) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Tue Oct 7 08:22:17 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2205 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9987 > smt_wct=3 > smb_vwv[ 0]=13052 (0x32FC) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13052 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13052 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=9987 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 258 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x102 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2206 of length 262 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=258 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10051 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=44032 (0xAC00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=175 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e > [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 5C .n.t.i.t .i.e.s.\ > [060] 00 7B 00 32 00 30 00 35 00 43 00 30 00 30 00 45 .{.2.0.5 .C.0.0.E > [070] 00 33 00 2D 00 37 00 43 00 43 00 34 00 2D 00 34 .3.-.7.C .C.4.-.4 > [080] 00 43 00 41 00 43 00 2D 00 42 00 44 00 31 00 42 .C.A.C.- .B.D.1.B > [090] 00 2D 00 31 00 45 00 31 00 35 00 45 00 34 00 44 .-.1.E.1 .5.E.4.D > [0A0] 00 31 00 32 00 34 00 31 00 46 00 7D 00 00 00 .1.2.4.1 .F.}... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8957, fnum = 13053 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13053 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8958, fnum = 13054 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13054, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10051 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=65024 (0xFE00) > smb_vwv[ 3]= 306 (0x132) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2207 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10115 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 66 00 FE 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13054) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2208 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=10179 > smt_wct=3 > smb_vwv[ 0]=13054 (0x32FE) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13054 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13054 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=10179 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 180 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xb4 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2209 of length 184 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=180 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10243 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=24064 (0x5E00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=97 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e > [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 00 .n.t.i.t .i.e.s.. > [060] 00 . >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8959, fnum = 13055 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13055 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8960, fnum = 13056 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13056, open name = %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10243 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 307 (0x133) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2210 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10307 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 69 00 00 33 EC 03 00 00 72 00 00 00 00 00 00 .i..3... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13056) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2211 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=10371 > smt_wct=3 > smb_vwv[ 0]=13056 (0x3300) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13056 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13056 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=10371 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 180 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xb4 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2212 of length 184 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=180 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10435 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=24064 (0x5E00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=38400 (0x9600) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1536 (0x600) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=97 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e > [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 00 .n.t.i.t .i.e.s.. > [060] 00 . >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8961, fnum = 13057 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x1 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) > fd_open: name %u_bombur_%H_Win2K/Application Data/Identities, flags = 01 mode = 0700, fd = -1. Is a directory >[2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) > Error opening file %u_bombur_%H_Win2K/Application Data/Identities (Is a directory) (local_flags=1) (flags=1) >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13057 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8962, fnum = 13058 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13058, open name = %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10435 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 307 (0x133) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2213 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10499 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 69 00 02 33 EC 03 00 00 72 00 00 00 00 00 00 .i..3... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... > [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13058) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Tue Oct 7 08:22:17 2003 > size: 0 dosmode: 0 >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) > call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 > >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2214 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=10563 > smt_wct=3 > smb_vwv[ 0]=13058 (0x3302) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13058 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13058 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=10563 > smt_wct=0 > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,39) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,39) wrote 39 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 180 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0xb4 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2215 of length 184 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=180 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10627 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=24064 (0x5E00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 4097 (0x1001) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8192 (0x2000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=97 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b > [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i > [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l > [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. > [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e > [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 00 .n.t.i.t .i.e.s.. > [060] 00 . >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBntcreateX (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) > reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) > map_create_disposition: Mapped create_disposition 0x1 to 0x1 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) > map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 >[2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) > map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8963, fnum = 13059 (1 used) >[2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) > open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) > calling open_file with flags=0x0 flags2=0x0 mode=0700 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13059 (0 used) >[2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) > allocated file structure 8964, fnum = 13060 (1 used) >[2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) > open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) > reply_ntcreate_and_X: fnum = 13060, open name = %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10627 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1024 (0x400) > smb_vwv[ 3]= 307 (0x133) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4938 (0x134A) > smb_vwv[ 7]=55761 (0xD9D1) > smb_vwv[ 8]=50060 (0xC38C) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]= 4938 (0x134A) > smb_vwv[11]=55761 (0xD9D1) > smb_vwv[12]=50060 (0xC38C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 4938 (0x134A) > smb_vwv[15]=55761 (0xD9D1) > smb_vwv[16]=50060 (0xC38C) > smb_vwv[17]= 1 (0x1) > smb_vwv[18]= 4938 (0x134A) > smb_vwv[19]=55761 (0xD9D1) > smb_vwv[20]=50060 (0xC38C) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 4096 (0x1000) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,107) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,107) wrote 107 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 116 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x74 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2216 of length 120 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=116 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=212 > smb_uid=102 > smb_mid=10691 > smt_wct=15 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 6 (0x6) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 40 (0x28) > smb_vwv[12]= 76 (0x4C) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 8 (0x8) > smb_bcc=51 >[2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) > [000] 00 69 00 04 33 EC 03 00 00 72 00 00 00 00 00 00 .i..3... .r...... > [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ > [030] 00 00 00 ... >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities" >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) > stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] >[2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) > call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13060) info_level=1004 totdata=40 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) > actime: Tue Oct 7 09:49:24 2003 > modtime: Wed Dec 31 19:00:00 1969 > size: 0 dosmode: 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) > call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities : setting dos mode 90 >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) > dos_mode: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) > is_in_path: %u_bombur_%H_Win2K/Application Data/Identities >[2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) > is_in_path: no name list. >[2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) > dos_mode returning d >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data >[2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 >[2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) > unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 040700 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 >[2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) > t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) > write_socket(19,62) >[2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) > write_socket(19,62) wrote 62 >[2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) > got smb length of 41 >[2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) > got message type 0x0 of len 0x29 >[2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) > Transaction 2217 of length 45 >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=3 > smb_pid=65279 > smb_uid=102 > smb_mid=10755 > smt_wct=3 > smb_vwv[ 0]=13060 (0x3304) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) > switch message SMBclose (pid 28556) >[2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) > change_to_user: Skipping user change - already user >[2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) > close directory fnum=13060 >[2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) > freed files structure 13060 (0 used) >[2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 581
:
184
| 185 |
186