Attachment 1973 Details for Bug 3817 – Level 10 debug log w/ 3.0.14a and pthread

Level 10 debug log w/ 3.0.14a and pthread

log.smbd.hang (text/plain), 593.89 KB, created by Wilco Baan Hofman on 2006-06-21 07:18:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Wilco Baan Hofman

Created: 2006-06-21 07:18:36 UTC

Size: 593.89 KB

patch

obsolete

>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8647 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=44608
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 1227, fnum = 5323 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 6
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 5323, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=44608
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=51968 (0xCB00)
>  smb_vwv[ 3]=  276 (0x114)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8648 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44672
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5323 (0x14CB)
>  smb_vwv[ 3]=   16 (0x10)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 16, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 16, size = 8192, returned 117
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5323 max=8192 nread=117
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=176
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44672
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  117 (0x75)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=117
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [010] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [020] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [030] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [040] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [050] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [060] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [070] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,180)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,180) wrote 180
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2488 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=9920
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 525, fnum = 4621 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 24. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 4621, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=9920
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 3328 (0xD00)
>  smb_vwv[ 3]=  274 (0x112)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2489 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=9984
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4621 (0x120D)
>  smb_vwv[ 3]=   16 (0x10)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 16, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 16 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 16 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 16, size = 8192, returned 117
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4621 max=8192 nread=117
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=176
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=9984
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  117 (0x75)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=117
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [010] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [020] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [030] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [040] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [050] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [060] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [070] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,180)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,180) wrote 180
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2490 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=9984
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4621 (0x120D)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8075 (0x1F8B)
>  smb_vwv[ 6]= 8075 (0x1F8B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8075 (0x1F8B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8075
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 133 8075 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 133 8075 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8075, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4621 max=8075 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=9984
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14152 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64320
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=   61 (0x3D)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=61 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 61, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 61, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 61 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 61 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=61 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 61, size = 512, returned 72
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=72
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=131
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64320
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   72 (0x48)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=72
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 53 3A 0D 0A 63 64 20 22  5C 61 6D 62 72 61 73 6F  S:..cd " \ambraso
>  [010] 66 74 5C 74 61 66 65 6C  20 74 6F 74 61 61 6C 22  ft\tafel  totaal"
>  [020] 0D 0A 3A 33 30 0D 0A 73  74 61 72 74 20 2F 77 20  ..:30..s tart /w 
>  [030] 74 73 63 68 6C 6D 65 6E  75 2E 65 78 65 0D 0A 67  tschlmen u.exe..g
>  [040] 6F 74 6F 20 31 30 0D 0A                           oto 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,135)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,135) wrote 135
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14153 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64320
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  440 (0x1B8)
>  smb_vwv[ 6]=  440 (0x1B8)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  440 (0x1B8)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=440 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 440, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 440
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 440 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 440 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=440 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 440, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=440 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64320
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14154 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64384
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=   65 (0x41)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=65 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 65, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 65, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 65 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 65 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=65 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 65, size = 512, returned 68
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=68
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=127
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64384
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   68 (0x44)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=68
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 63 64 20 22 5C 61 6D 62  72 61 73 6F 66 74 5C 74  cd "\amb rasoft\t
>  [010] 61 66 65 6C 20 74 6F 74  61 61 6C 22 0D 0A 3A 33  afel tot aal"..:3
>  [020] 30 0D 0A 73 74 61 72 74  20 2F 77 20 74 73 63 68  0..start  /w tsch
>  [030] 6C 6D 65 6E 75 2E 65 78  65 0D 0A 67 6F 74 6F 20  lmenu.ex e..goto 
>  [040] 31 30 0D 0A                                       10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,131)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,131) wrote 131
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14155 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64384
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  444 (0x1BC)
>  smb_vwv[ 6]=  444 (0x1BC)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  444 (0x1BC)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=444 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 444, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 444
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 444 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 444 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=444 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 444, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=444 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64384
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3764 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2627
>  smt_wct=3
>  smb_vwv[ 0]= 4831 (0x12DF)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=21 fnum=4831 (numopen=2)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[5]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 5
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 6 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=1) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4831 (1 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2627
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11609 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=13697
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 1550, fnum = 5646 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 5646, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=13697
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]=  278 (0x116)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 72
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x48
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11610 of length 76
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=13761
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 0E 16 ED 03                              ....... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo Ambra.bat (fnum = 5646) level=1005 call=7 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,88)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,88) wrote 88
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14476 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=60737
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 2143, fnum = 6239 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 6239, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=60737
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=24320 (0x5F00)
>  smb_vwv[ 3]=  280 (0x118)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6241 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40449
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4694 (0x1256)
>  smb_vwv[ 3]=   56 (0x38)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 56, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 56 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 56 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 56, size = 512, returned 77
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4694 max=512 nread=77
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=136
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40449
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   77 (0x4D)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=77
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 32 30 0D 0A 53 3A 0D  0A 63 64 20 22 5C 61 6D  :20..S:. .cd "\am
>  [010] 62 72 61 73 6F 66 74 5C  74 61 66 65 6C 20 74 6F  brasoft\ tafel to
>  [020] 74 61 61 6C 22 0D 0A 3A  33 30 0D 0A 73 74 61 72  taal"..: 30..star
>  [030] 74 20 2F 77 20 74 73 63  68 6C 6D 65 6E 75 2E 65  t /w tsc hlmenu.e
>  [040] 78 65 0D 0A 67 6F 74 6F  20 31 30 0D 0A           xe..goto  10..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,140)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,140) wrote 140
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6242 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40449
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4694 (0x1256)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  435 (0x1B3)
>  smb_vwv[ 6]=  435 (0x1B3)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  435 (0x1B3)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 435
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 435 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 435 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 435, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4694 max=435 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40449
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8252 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22592
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=   65 (0x41)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=65 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 65, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 65, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 65 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 65 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=65 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 65, size = 512, returned 68
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=512 nread=68
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=127
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22592
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   68 (0x44)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=68
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 63 64 20 22 5C 61 6D 62  72 61 73 6F 66 74 5C 74  cd "\amb rasoft\t
>  [010] 61 66 65 6C 20 74 6F 74  61 61 6C 22 0D 0A 3A 33  afel tot aal"..:3
>  [020] 30 0D 0A 73 74 61 72 74  20 2F 77 20 74 73 63 68  0..start  /w tsch
>  [030] 6C 6D 65 6E 75 2E 65 78  65 0D 0A 67 6F 74 6F 20  lmenu.ex e..goto 
>  [040] 31 30 0D 0A                                       10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,131)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,131) wrote 131
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8253 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22592
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  444 (0x1BC)
>  smb_vwv[ 6]=  444 (0x1BC)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  444 (0x1BC)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=444 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 444, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 444
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 444 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 444 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=444 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 444, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=444 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22592
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8254 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22656
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=   95 (0x5F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=95 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 95, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 95, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 95 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 95 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=95 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 95, size = 512, returned 38
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=512 nread=38
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=97
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22656
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   38 (0x26)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=38
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [010] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [020] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,101)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,101) wrote 101
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8255 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22656
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  474 (0x1DA)
>  smb_vwv[ 6]=  474 (0x1DA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  474 (0x1DA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=474 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 474, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 474
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 474 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 474 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=474 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 474, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=474 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22656
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8649 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44672
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5323 (0x14CB)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8075 (0x1F8B)
>  smb_vwv[ 6]= 8075 (0x1F8B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8075 (0x1F8B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8075
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8075, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5323 max=8075 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44672
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8650 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44736
>  smt_wct=3
>  smb_vwv[ 0]= 5323 (0x14CB)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=5323 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 3
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 7 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 5323 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44736
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 102
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x66
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8651 of length 106
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=102
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=44800
>  smt_wct=15
>  smb_vwv[ 0]=   34 (0x22)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   34 (0x22)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=37
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 16 00 56 05 07  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 73 00 74 00 61 00 72  00 74 00 2E 00 74 00 78  .s.t.a.r .t...t.x
>  [020] 00 74 00 00 00                                    .t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "start.txt"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [START.TXT]
>[2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135)
>  stat_cache_add: Added entry (832bf20:sizea) START.TXT -> start.txt
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170)
>  conversion finished start.txt -> start.txt
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404)
>  dir=./, mask = start.txt
>[2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371)
>  dptr_create dir=./
>[2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431)
>  dptr_num is 256, wcard = start.txt, attr = 22
>[2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436)
>  dirpath=<./> dontdescend=<>
>[2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869)
>  get_lanman2_dir_entry:readdir on dirptr 0x82bcfe8 now at offset -1
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: ./start.txt
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning 
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning 
>[2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959)
>  get_lanman2_dir_entry found ./start.txt fname=start.txt
>[2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220)
>  closing dptr key 256
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,184)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,184) wrote 184
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518)
>  SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2491 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10048
>  smt_wct=3
>  smb_vwv[ 0]= 4621 (0x120D)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=24 fnum=4621 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 2
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 6 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4621 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10048
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14156 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64448
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=   95 (0x5F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=95 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 95, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 95, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 95 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 95 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=95 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 95, size = 512, returned 38
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=38
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=97
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64448
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   38 (0x26)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=38
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [010] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [020] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,101)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,101) wrote 101
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14157 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64448
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  474 (0x1DA)
>  smb_vwv[ 6]=  474 (0x1DA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  474 (0x1DA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=474 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 474, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 474
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 474 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 474 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=474 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 474, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=474 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64448
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14158 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64512
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  100 (0x64)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=100 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 100, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 100, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 100 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 100 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=100 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 100, size = 512, returned 33
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=33
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=92
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64512
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   33 (0x21)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=33
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 73 74 61 72 74 20 2F 77  20 74 73 63 68 6C 6D 65  start /w  tschlme
>  [010] 6E 75 2E 65 78 65 0D 0A  67 6F 74 6F 20 31 30 0D  nu.exe.. goto 10.
>  [020] 0A                                                . 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,96)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,96) wrote 96
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14159 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64512
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  479 (0x1DF)
>  smb_vwv[ 6]=  479 (0x1DF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  479 (0x1DF)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=479 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 479, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 479
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 479 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 479 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=479 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 479, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=479 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64512
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3765 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1748
>  smb_uid=101
>  smb_mid=2691
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 736, fnum = 4832 (2 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=2)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 4832, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1748
>  smb_uid=101
>  smb_mid=2691
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=57344 (0xE000)
>  smb_vwv[ 3]=  274 (0x112)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3766 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2755
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4832 (0x12E0)
>  smb_vwv[ 3]=   16 (0x10)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 16, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 16, size = 8192, returned 117
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4832 max=8192 nread=117
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=176
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2755
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  117 (0x75)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=117
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [010] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [020] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [030] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [040] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [050] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [060] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [070] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,180)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,180) wrote 180
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3767 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2755
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4832 (0x12E0)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8075 (0x1F8B)
>  smb_vwv[ 6]= 8075 (0x1F8B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8075 (0x1F8B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8075
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8075, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4832 max=8075 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2755
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11611 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13825
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5646 (0x160E)
>  smb_vwv[ 3]=   47 (0x2F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 47, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 47, size = 512, returned 86
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5646 max=512 nread=86
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=145
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13825
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   86 (0x56)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=86
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A 3A 32 30 0D 0A 53 3A  goto 10. .:20..S:
>  [010] 0D 0A 63 64 20 22 5C 61  6D 62 72 61 73 6F 66 74  ..cd "\a mbrasoft
>  [020] 5C 74 61 66 65 6C 20 74  6F 74 61 61 6C 22 0D 0A  \tafel t otaal"..
>  [030] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [040] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [050] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,149)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,149) wrote 149
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11612 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13825
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5646 (0x160E)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  426 (0x1AA)
>  smb_vwv[ 6]=  426 (0x1AA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  426 (0x1AA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 426
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 426, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5646 max=426 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13825
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14477 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=60801
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6239 (0x185F)
>  smb_vwv[ 3]=   16 (0x10)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 16, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 16, size = 8192, returned 117
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6239 max=8192 nread=117
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=176
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=60801
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  117 (0x75)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=117
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [010] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [020] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [030] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [040] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [050] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [060] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [070] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,180)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,180) wrote 180
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14478 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=60801
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6239 (0x185F)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8075 (0x1F8B)
>  smb_vwv[ 6]= 8075 (0x1F8B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8075 (0x1F8B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8075
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8075, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6239 max=8075 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=60801
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6243 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40513
>  smt_wct=3
>  smb_vwv[ 0]= 4694 (0x1256)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=20 fnum=4694 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 3
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 6 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4694 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40513
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8256 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22720
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  100 (0x64)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=100 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 100, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 100, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 100 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 100 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=100 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 100, size = 512, returned 33
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=512 nread=33
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=92
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22720
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   33 (0x21)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=33
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 73 74 61 72 74 20 2F 77  20 74 73 63 68 6C 6D 65  start /w  tschlme
>  [010] 6E 75 2E 65 78 65 0D 0A  67 6F 74 6F 20 31 30 0D  nu.exe.. goto 10.
>  [020] 0A                                                . 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,96)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,96) wrote 96
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8257 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22720
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  479 (0x1DF)
>  smb_vwv[ 6]=  479 (0x1DF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  479 (0x1DF)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=479 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 479, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 479
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 479 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 479 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=479 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 479, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=479 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22720
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8258 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22784
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  124 (0x7C)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=124 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 124, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 124, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 124 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 124 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=124 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 124, size = 512, returned 9
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=512 nread=9
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=68
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22784
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    9 (0x9)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=9
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A                       goto 10. .
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,72)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,72) wrote 72
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8259 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22784
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  503 (0x1F7)
>  smb_vwv[ 6]=  503 (0x1F7)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  503 (0x1F7)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=503 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 503, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 503
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 503 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 503 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=503 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 503, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=503 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22784
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8652 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=44864
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 1228, fnum = 5324 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 5324, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=44864
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=52224 (0xCC00)
>  smb_vwv[ 3]=  276 (0x114)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 72
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x48
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8653 of length 76
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=44928
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 CC 14 ED 03                              ....... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo Ambra.bat (fnum = 5324) level=1005 call=7 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,88)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,88) wrote 88
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 102
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x66
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2492 of length 106
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=102
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=10112
>  smt_wct=15
>  smb_vwv[ 0]=   34 (0x22)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   34 (0x22)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=37
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 16 00 56 05 07  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 73 00 74 00 61 00 72  00 74 00 2E 00 74 00 78  .s.t.a.r .t...t.x
>  [020] 00 74 00 00 00                                    .t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "start.txt"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [START.TXT]
>[2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135)
>  stat_cache_add: Added entry (82e2c50:sizea) START.TXT -> start.txt
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170)
>  conversion finished start.txt -> start.txt
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404)
>  dir=./, mask = start.txt
>[2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371)
>  dptr_create dir=./
>[2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431)
>  dptr_num is 256, wcard = start.txt, attr = 22
>[2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436)
>  dirpath=<./> dontdescend=<>
>[2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869)
>  get_lanman2_dir_entry:readdir on dirptr 0x82bde80 now at offset -1
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: ./start.txt
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning 
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning 
>[2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959)
>  get_lanman2_dir_entry found ./start.txt fname=start.txt
>[2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220)
>  closing dptr key 256
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,184)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,184) wrote 184
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518)
>  SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2493 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=10176
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 526, fnum = 4622 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 24. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 4622, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=10176
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]=  274 (0x112)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14160 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64576
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  124 (0x7C)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=124 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 124, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 124, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 124 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 124 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=124 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 124, size = 512, returned 9
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=9
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=68
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64576
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    9 (0x9)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=9
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A                       goto 10. .
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,72)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,72) wrote 72
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14161 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64576
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  503 (0x1F7)
>  smb_vwv[ 6]=  503 (0x1F7)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  503 (0x1F7)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=503 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 503, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 503
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 503 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 503 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=503 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 503, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=503 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64576
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14162 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64640
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 512, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64640
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14163 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64704
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=0 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 0, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 0, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 0 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 0 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=0 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 0, size = 512, returned 133
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=133
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=192
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64704
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  133 (0x85)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=133
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 40 65 63 68 6F 20 6F 66  66 0D 0A 3A 31 30 0D 0A  @echo of f..:10..
>  [010] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [020] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [030] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [040] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [050] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [060] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [070] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [080] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,196)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,196) wrote 196
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3768 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2819
>  smt_wct=3
>  smb_vwv[ 0]= 4832 (0x12E0)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=4832 (numopen=2)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 2
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 7 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=1) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4832 (1 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=2819
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11613 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13889
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5646 (0x160E)
>  smb_vwv[ 3]=   56 (0x38)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 56, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 56, size = 512, returned 77
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5646 max=512 nread=77
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=136
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13889
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   77 (0x4D)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=77
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 32 30 0D 0A 53 3A 0D  0A 63 64 20 22 5C 61 6D  :20..S:. .cd "\am
>  [010] 62 72 61 73 6F 66 74 5C  74 61 66 65 6C 20 74 6F  brasoft\ tafel to
>  [020] 74 61 61 6C 22 0D 0A 3A  33 30 0D 0A 73 74 61 72  taal"..: 30..star
>  [030] 74 20 2F 77 20 74 73 63  68 6C 6D 65 6E 75 2E 65  t /w tsc hlmenu.e
>  [040] 78 65 0D 0A 67 6F 74 6F  20 31 30 0D 0A           xe..goto  10..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,140)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,140) wrote 140
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11614 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13889
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5646 (0x160E)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  435 (0x1B3)
>  smb_vwv[ 6]=  435 (0x1B3)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  435 (0x1B3)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 435
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 435, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5646 max=435 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13889
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14479 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=60865
>  smt_wct=3
>  smb_vwv[ 0]= 6239 (0x185F)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=6239 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 2
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 6 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 6239 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=60865
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 76
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x4c
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14480 of length 80
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=60929
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 EC 03 00 00 00  00 00 00                 ........ ...
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: .
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning d
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2586)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfilepathinfo(2596)
>  SMB_QFBI - create: Wed Jun 21 14:19:27 2006
>   access: Wed Jun 21 14:19:27 2006
>   write: Wed Jun 21 14:19:27 2006
>   change: Wed Jun 21 14:19:27 2006
>   mode: 10
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,104)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,104) wrote 104
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6244 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40577
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 599, fnum = 4695 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 20. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 4695, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40577
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=22272 (0x5700)
>  smb_vwv[ 3]=  274 (0x112)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6245 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40641
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4695 (0x1257)
>  smb_vwv[ 3]=   61 (0x3D)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 61, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 61 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 61 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 61, size = 8192, returned 72
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4695 max=8192 nread=72
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=131
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40641
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   72 (0x48)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=72
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 53 3A 0D 0A 63 64 20 22  5C 61 6D 62 72 61 73 6F  S:..cd " \ambraso
>  [010] 66 74 5C 74 61 66 65 6C  20 74 6F 74 61 61 6C 22  ft\tafel  totaal"
>  [020] 0D 0A 3A 33 30 0D 0A 73  74 61 72 74 20 2F 77 20  ..:30..s tart /w 
>  [030] 74 73 63 68 6C 6D 65 6E  75 2E 65 78 65 0D 0A 67  tschlmen u.exe..g
>  [040] 6F 74 6F 20 31 30 0D 0A                           oto 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,135)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,135) wrote 135
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6246 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40641
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4695 (0x1257)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8120 (0x1FB8)
>  smb_vwv[ 6]= 8120 (0x1FB8)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8120 (0x1FB8)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8120
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 8120 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 8120 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8120, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4695 max=8120 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40641
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8260 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22848
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 512, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=512 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22848
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8261 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22912
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=0 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 0, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 0, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 0 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 0 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=0 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 0, size = 512, returned 133
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=512 nread=133
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=192
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22912
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  133 (0x85)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=133
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 40 65 63 68 6F 20 6F 66  66 0D 0A 3A 31 30 0D 0A  @echo of f..:10..
>  [010] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [020] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [030] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [040] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [050] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [060] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [070] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [080] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,196)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,196) wrote 196
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8262 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22912
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  379 (0x17B)
>  smb_vwv[ 6]=  379 (0x17B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  379 (0x17B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=379 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 379, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 379
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 379 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 379 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=379 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 379, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=379 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22912
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8263 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22976
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=   11 (0xB)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=11 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 11, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 11, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 11 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 11 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=11 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 11, size = 512, returned 122
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=512 nread=122
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=181
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22976
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  122 (0x7A)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=122
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 31 30 0D 0A 69 66 20  65 78 69 73 74 20 4E 3A  :10..if  exist N:
>  [010] 5C 73 74 61 72 74 2E 74  78 74 20 67 6F 74 6F 20  \start.t xt goto 
>  [020] 32 30 0D 0A 67 6F 74 6F  20 31 30 0D 0A 3A 32 30  20..goto  10..:20
>  [030] 0D 0A 53 3A 0D 0A 63 64  20 22 5C 61 6D 62 72 61  ..S:..cd  "\ambra
>  [040] 73 6F 66 74 5C 74 61 66  65 6C 20 74 6F 74 61 61  soft\taf el totaa
>  [050] 6C 22 0D 0A 3A 33 30 0D  0A 73 74 61 72 74 20 2F  l"..:30. .start /
>  [060] 77 20 74 73 63 68 6C 6D  65 6E 75 2E 65 78 65 0D  w tschlm enu.exe.
>  [070] 0A 67 6F 74 6F 20 31 30  0D 0A                    .goto 10 ..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,185)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,185) wrote 185
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8264 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22976
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5301 (0x14B5)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  390 (0x186)
>  smb_vwv[ 6]=  390 (0x186)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  390 (0x186)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=390 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 390, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 390
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 390 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 390 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=390 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 390, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5301 max=390 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=22976
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8265 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23040
>  smt_wct=3
>  smb_vwv[ 0]= 5301 (0x14B5)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=20 fnum=5301 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 4
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 6 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 5301 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23040
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8654 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44992
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5324 (0x14CC)
>  smb_vwv[ 3]=   47 (0x2F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 47, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 47, size = 512, returned 86
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5324 max=512 nread=86
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=145
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44992
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   86 (0x56)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=86
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A 3A 32 30 0D 0A 53 3A  goto 10. .:20..S:
>  [010] 0D 0A 63 64 20 22 5C 61  6D 62 72 61 73 6F 66 74  ..cd "\a mbrasoft
>  [020] 5C 74 61 66 65 6C 20 74  6F 74 61 61 6C 22 0D 0A  \tafel t otaal"..
>  [030] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [040] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [050] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,149)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,149) wrote 149
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8655 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44992
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5324 (0x14CC)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  426 (0x1AA)
>  smb_vwv[ 6]=  426 (0x1AA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  426 (0x1AA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 426
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 426, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5324 max=426 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=44992
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 72
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x48
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2494 of length 76
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=10240
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 0E 12 ED 03                              ....... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo Ambra.bat (fnum = 4622) level=1005 call=7 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,88)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,88) wrote 88
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2495 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10304
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4622 (0x120E)
>  smb_vwv[ 3]=   47 (0x2F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 47, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 47 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 47 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 47, size = 512, returned 86
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4622 max=512 nread=86
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=145
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10304
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   86 (0x56)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=86
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A 3A 32 30 0D 0A 53 3A  goto 10. .:20..S:
>  [010] 0D 0A 63 64 20 22 5C 61  6D 62 72 61 73 6F 66 74  ..cd "\a mbrasoft
>  [020] 5C 74 61 66 65 6C 20 74  6F 74 61 61 6C 22 0D 0A  \tafel t otaal"..
>  [030] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [040] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [050] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,149)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,149) wrote 149
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2496 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10304
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4622 (0x120E)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  426 (0x1AA)
>  smb_vwv[ 6]=  426 (0x1AA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  426 (0x1AA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 426
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 133 426 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 133 426 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 426, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4622 max=426 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10304
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14164 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64704
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  379 (0x17B)
>  smb_vwv[ 6]=  379 (0x17B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  379 (0x17B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=379 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 379, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 379
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 379 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 379 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=379 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 379, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=379 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64704
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14165 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64768
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=   11 (0xB)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=11 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 11, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 11, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 11 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 11 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=11 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 11, size = 512, returned 122
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=512 nread=122
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=181
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64768
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  122 (0x7A)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=122
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 31 30 0D 0A 69 66 20  65 78 69 73 74 20 4E 3A  :10..if  exist N:
>  [010] 5C 73 74 61 72 74 2E 74  78 74 20 67 6F 74 6F 20  \start.t xt goto 
>  [020] 32 30 0D 0A 67 6F 74 6F  20 31 30 0D 0A 3A 32 30  20..goto  10..:20
>  [030] 0D 0A 53 3A 0D 0A 63 64  20 22 5C 61 6D 62 72 61  ..S:..cd  "\ambra
>  [040] 73 6F 66 74 5C 74 61 66  65 6C 20 74 6F 74 61 61  soft\taf el totaa
>  [050] 6C 22 0D 0A 3A 33 30 0D  0A 73 74 61 72 74 20 2F  l"..:30. .start /
>  [060] 77 20 74 73 63 68 6C 6D  65 6E 75 2E 65 78 65 0D  w tschlm enu.exe.
>  [070] 0A 67 6F 74 6F 20 31 30  0D 0A                    .goto 10 ..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,185)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,185) wrote 185
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14166 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64768
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6151 (0x1807)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  390 (0x186)
>  smb_vwv[ 6]=  390 (0x186)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  390 (0x186)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=390 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 390, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 390
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 390 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 390 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=390 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 390, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6151 max=390 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64768
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 102
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x66
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3769 of length 106
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=102
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1748
>  smb_uid=101
>  smb_mid=2883
>  smt_wct=15
>  smb_vwv[ 0]=   34 (0x22)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   34 (0x22)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=37
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 16 00 56 05 07  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 73 00 74 00 61 00 72  00 74 00 2E 00 74 00 78  .s.t.a.r .t...t.x
>  [020] 00 74 00 00 00                                    .t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "start.txt"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [START.TXT]
>[2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135)
>  stat_cache_add: Added entry (82b50e0:sizea) START.TXT -> start.txt
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170)
>  conversion finished start.txt -> start.txt
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404)
>  dir=./, mask = start.txt
>[2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371)
>  dptr_create dir=./
>[2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431)
>  dptr_num is 256, wcard = start.txt, attr = 22
>[2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436)
>  dirpath=<./> dontdescend=<>
>[2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869)
>  get_lanman2_dir_entry:readdir on dirptr 0x8339408 now at offset -1
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: ./start.txt
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning 
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning 
>[2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959)
>  get_lanman2_dir_entry found ./start.txt fname=start.txt
>[2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220)
>  closing dptr key 256
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,184)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,184) wrote 184
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518)
>  SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3770 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1748
>  smb_uid=101
>  smb_mid=2947
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] EA 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 737, fnum = 4833 (2 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=2)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 4833, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1748
>  smb_uid=101
>  smb_mid=2947
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=57600 (0xE100)
>  smb_vwv[ 3]=  274 (0x112)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11615 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13953
>  smt_wct=3
>  smb_vwv[ 0]= 5646 (0x160E)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=5646 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[4]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 4
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 6 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 5646 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=13953
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 102
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x66
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14481 of length 106
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=102
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=60993
>  smt_wct=15
>  smb_vwv[ 0]=   34 (0x22)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   34 (0x22)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=37
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 16 00 56 05 07  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 73 00 74 00 61 00 72  00 74 00 2E 00 74 00 78  .s.t.a.r .t...t.x
>  [020] 00 74 00 00 00                                    .t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "start.txt"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [START.TXT]
>[2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135)
>  stat_cache_add: Added entry (831f6a8:sizea) START.TXT -> start.txt
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170)
>  conversion finished start.txt -> start.txt
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404)
>  dir=./, mask = start.txt
>[2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371)
>  dptr_create dir=./
>[2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431)
>  dptr_num is 256, wcard = start.txt, attr = 22
>[2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436)
>  dirpath=<./> dontdescend=<>
>[2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869)
>  get_lanman2_dir_entry:readdir on dirptr 0x82bd568 now at offset -1
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: ./start.txt
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning 
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning 
>[2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959)
>  get_lanman2_dir_entry found ./start.txt fname=start.txt
>[2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220)
>  closing dptr key 256
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,184)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,184) wrote 184
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518)
>  SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14482 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=61057
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 2144, fnum = 6240 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 6240, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=61057
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=24576 (0x6000)
>  smb_vwv[ 3]=  280 (0x118)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11616 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=14017
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 1551, fnum = 5647 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 5647, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=14017
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 3840 (0xF00)
>  smb_vwv[ 3]=  278 (0x116)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11617 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14081
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5647 (0x160F)
>  smb_vwv[ 3]=   61 (0x3D)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 61, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 61 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 61 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 61, size = 8192, returned 72
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5647 max=8192 nread=72
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=131
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14081
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   72 (0x48)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=72
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 53 3A 0D 0A 63 64 20 22  5C 61 6D 62 72 61 73 6F  S:..cd " \ambraso
>  [010] 66 74 5C 74 61 66 65 6C  20 74 6F 74 61 61 6C 22  ft\tafel  totaal"
>  [020] 0D 0A 3A 33 30 0D 0A 73  74 61 72 74 20 2F 77 20  ..:30..s tart /w 
>  [030] 74 73 63 68 6C 6D 65 6E  75 2E 65 78 65 0D 0A 67  tschlmen u.exe..g
>  [040] 6F 74 6F 20 31 30 0D 0A                           oto 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,135)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,135) wrote 135
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11618 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14081
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5647 (0x160F)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8120 (0x1FB8)
>  smb_vwv[ 6]= 8120 (0x1FB8)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8120 (0x1FB8)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8120
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 8120 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 8120 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8120, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5647 max=8120 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14081
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6247 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40705
>  smt_wct=3
>  smb_vwv[ 0]= 4695 (0x1257)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=20 fnum=4695 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 3
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 7 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4695 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=40705
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 126
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x7e
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6248 of length 130
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40769
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=61
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 41 00 6D 00 62  ........ .\.A.m.b
>  [010] 00 72 00 61 00 73 00 6F  00 66 00 74 00 5C 00 54  .r.a.s.o .f.t.\.T
>  [020] 00 61 00 66 00 65 00 6C  00 20 00 54 00 6F 00 74  .a.f.e.l . .T.o.t
>  [030] 00 61 00 61 00 6C 00 5C  00 0A 00 00 00           .a.a.l.\ .....
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13042) conn 0x8339450
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 4] smbd/vfs.c:vfs_ChDir(660)
>  vfs_ChDir to /home/data/Software
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambrasoft/Tafel Totaal/
>  "
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [AMBRASOFT/TAFEL TOTAAL/
>  ]
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRASOFT/TAFEL TOTAAL] -> [Ambrasoft/Tafel Totaal]
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(175)
>  unix_convert begin: name = Ambrasoft/Tafel Totaal/
>  , dirpath = Ambrasoft/Tafel Totaal, start = 
>  
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled 
>   ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component 
>   (len 1) ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled 
>   ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component 
>   (len 1) ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled 
>   ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component 
>   (len 1) ?
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(324)
>  New file 
>  
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2443)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of Ambrasoft/Tafel Totaal/
>   failed (No such file or directory)
>[2006/06/21 14:19:27, 10] smbd/trans2.c:set_bad_path_error(2191)
>  set_bad_path_error: err = 2 bad_path = 0
>[2006/06/21 14:19:27, 3] smbd/error.c:error_packet(105)
>  error string = No such file or directory
>[2006/06/21 14:19:27, 3] smbd/error.c:error_packet(129)
>  error packet at smbd/trans2.c(2197) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40769
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8266 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=408
>  smb_uid=100
>  smb_mid=23104
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 1206, fnum = 5302 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 20. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 5302, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=408
>  smb_uid=100
>  smb_mid=23104
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=46592 (0xB600)
>  smb_vwv[ 3]=  276 (0x114)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8267 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23168
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5302 (0x14B6)
>  smb_vwv[ 3]=   16 (0x10)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 16, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 16 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 16 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 16, size = 8192, returned 117
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5302 max=8192 nread=117
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=176
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23168
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  117 (0x75)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=117
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [010] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [020] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [030] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [040] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [050] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [060] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [070] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,180)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,180) wrote 180
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8268 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23168
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5302 (0x14B6)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8075 (0x1F8B)
>  smb_vwv[ 6]= 8075 (0x1F8B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8075 (0x1F8B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8075
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 20 12 133 8075 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 20 12 133 8075 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8075, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5302 max=8075 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23168
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8656 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45056
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5324 (0x14CC)
>  smb_vwv[ 3]=   56 (0x38)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 56, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 56, size = 512, returned 77
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5324 max=512 nread=77
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=136
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45056
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   77 (0x4D)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=77
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 32 30 0D 0A 53 3A 0D  0A 63 64 20 22 5C 61 6D  :20..S:. .cd "\am
>  [010] 62 72 61 73 6F 66 74 5C  74 61 66 65 6C 20 74 6F  brasoft\ tafel to
>  [020] 74 61 61 6C 22 0D 0A 3A  33 30 0D 0A 73 74 61 72  taal"..: 30..star
>  [030] 74 20 2F 77 20 74 73 63  68 6C 6D 65 6E 75 2E 65  t /w tsc hlmenu.e
>  [040] 78 65 0D 0A 67 6F 74 6F  20 31 30 0D 0A           xe..goto  10..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,140)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,140) wrote 140
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8657 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45056
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5324 (0x14CC)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  435 (0x1B3)
>  smb_vwv[ 6]=  435 (0x1B3)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  435 (0x1B3)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 435
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 435, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5324 max=435 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45056
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2497 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10368
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4622 (0x120E)
>  smb_vwv[ 3]=   56 (0x38)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 56, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 56 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 56 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 56, size = 512, returned 77
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4622 max=512 nread=77
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=136
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10368
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   77 (0x4D)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=77
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 32 30 0D 0A 53 3A 0D  0A 63 64 20 22 5C 61 6D  :20..S:. .cd "\am
>  [010] 62 72 61 73 6F 66 74 5C  74 61 66 65 6C 20 74 6F  brasoft\ tafel to
>  [020] 74 61 61 6C 22 0D 0A 3A  33 30 0D 0A 73 74 61 72  taal"..: 30..star
>  [030] 74 20 2F 77 20 74 73 63  68 6C 6D 65 6E 75 2E 65  t /w tsc hlmenu.e
>  [040] 78 65 0D 0A 67 6F 74 6F  20 31 30 0D 0A           xe..goto  10..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,140)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,140) wrote 140
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2498 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10368
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4622 (0x120E)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  435 (0x1B3)
>  smb_vwv[ 6]=  435 (0x1B3)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  435 (0x1B3)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8658 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45120
>  smt_wct=3
>  smb_vwv[ 0]= 5324 (0x14CC)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=5324 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 8
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[5]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 5
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 7 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 5324 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45120
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 435
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 133 435 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 133 435 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 435, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4622 max=435 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10368
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2499 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10432
>  smt_wct=3
>  smb_vwv[ 0]= 4622 (0x120E)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=24 fnum=4622 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 7
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 4
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 6 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4622 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10432
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14167 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64832
>  smt_wct=3
>  smb_vwv[ 0]= 6151 (0x1807)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=6151 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 6
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 4
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 5 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 6151 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64832
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 72
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x48
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3771 of length 76
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1748
>  smb_uid=101
>  smb_mid=3011
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 E1 12 ED 03                              ....... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo Ambra.bat (fnum = 4833) level=1005 call=7 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,88)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,88) wrote 88
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3772 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3075
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4833 (0x12E1)
>  smb_vwv[ 3]=   47 (0x2F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 47, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 47, size = 512, returned 86
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4833 max=512 nread=86
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=145
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3075
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   86 (0x56)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=86
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A 3A 32 30 0D 0A 53 3A  goto 10. .:20..S:
>  [010] 0D 0A 63 64 20 22 5C 61  6D 62 72 61 73 6F 66 74  ..cd "\a mbrasoft
>  [020] 5C 74 61 66 65 6C 20 74  6F 74 61 61 6C 22 0D 0A  \tafel t otaal"..
>  [030] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [040] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [050] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,149)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,149) wrote 149
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3773 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3075
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4833 (0x12E1)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  426 (0x1AA)
>  smb_vwv[ 6]=  426 (0x1AA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  426 (0x1AA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 426
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 426, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4833 max=426 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3075
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14168 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1824
>  smb_uid=100
>  smb_mid=64896
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 2056, fnum = 6152 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 6
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 6152, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1824
>  smb_uid=100
>  smb_mid=64896
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 2048 (0x800)
>  smb_vwv[ 3]=  280 (0x118)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14169 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64960
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6152 (0x1808)
>  smb_vwv[ 3]=   16 (0x10)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 16, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 16 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=16 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 16, size = 8192, returned 117
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6152 max=8192 nread=117
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=176
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64960
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  117 (0x75)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=117
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 69 66 20 65 78 69 73 74  20 4E 3A 5C 73 74 61 72  if exist  N:\star
>  [010] 74 2E 74 78 74 20 67 6F  74 6F 20 32 30 0D 0A 67  t.txt go to 20..g
>  [020] 6F 74 6F 20 31 30 0D 0A  3A 32 30 0D 0A 53 3A 0D  oto 10.. :20..S:.
>  [030] 0A 63 64 20 22 5C 61 6D  62 72 61 73 6F 66 74 5C  .cd "\am brasoft\
>  [040] 74 61 66 65 6C 20 74 6F  74 61 61 6C 22 0D 0A 3A  tafel to taal"..:
>  [050] 33 30 0D 0A 73 74 61 72  74 20 2F 77 20 74 73 63  30..star t /w tsc
>  [060] 68 6C 6D 65 6E 75 2E 65  78 65 0D 0A 67 6F 74 6F  hlmenu.e xe..goto
>  [070] 20 31 30 0D 0A                                     10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,180)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,180) wrote 180
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14170 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64960
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6152 (0x1808)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8075 (0x1F8B)
>  smb_vwv[ 6]= 8075 (0x1F8B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8075 (0x1F8B)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8075
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 8075 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8075 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8075, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6152 max=8075 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=64960
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 72
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x48
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14483 of length 76
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=61121
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 60 18 ED 03                              ...`... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo Ambra.bat (fnum = 6240) level=1005 call=7 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,88)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,88) wrote 88
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14484 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61185
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6240 (0x1860)
>  smb_vwv[ 3]=   47 (0x2F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 47, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 47, size = 512, returned 86
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6240 max=512 nread=86
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=145
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61185
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   86 (0x56)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=86
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A 3A 32 30 0D 0A 53 3A  goto 10. .:20..S:
>  [010] 0D 0A 63 64 20 22 5C 61  6D 62 72 61 73 6F 66 74  ..cd "\a mbrasoft
>  [020] 5C 74 61 66 65 6C 20 74  6F 74 61 61 6C 22 0D 0A  \tafel t otaal"..
>  [030] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [040] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [050] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,149)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,149) wrote 149
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14485 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61185
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6240 (0x1860)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  426 (0x1AA)
>  smb_vwv[ 6]=  426 (0x1AA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  426 (0x1AA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 426
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 426, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6240 max=426 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61185
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11619 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14145
>  smt_wct=3
>  smb_vwv[ 0]= 5647 (0x160F)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=5647 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 6
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 2
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 5 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 5647 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14145
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 126
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x7e
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11620 of length 130
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=14209
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=61
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 41 00 6D 00 62  ........ .\.A.m.b
>  [010] 00 72 00 61 00 73 00 6F  00 66 00 74 00 5C 00 54  .r.a.s.o .f.t.\.T
>  [020] 00 61 00 66 00 65 00 6C  00 20 00 54 00 6F 00 74  .a.f.e.l . .T.o.t
>  [030] 00 61 00 61 00 6C 00 5C  00 0A 00 00 00           .a.a.l.\ .....
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13032) conn 0x83393b8
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 4] smbd/vfs.c:vfs_ChDir(660)
>  vfs_ChDir to /home/data/Software
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambrasoft/Tafel Totaal/
>  "
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [AMBRASOFT/TAFEL TOTAAL/
>  ]
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRASOFT/TAFEL TOTAAL] -> [Ambrasoft/Tafel Totaal]
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(175)
>  unix_convert begin: name = Ambrasoft/Tafel Totaal/
>  , dirpath = Ambrasoft/Tafel Totaal, start = 
>  
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled 
>   ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component 
>   (len 1) ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled 
>   ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component 
>   (len 1) ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled 
>   ?
>[2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component 
>   (len 1) ?
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(324)
>  New file 
>  
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2443)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of Ambrasoft/Tafel Totaal/
>   failed (No such file or directory)
>[2006/06/21 14:19:27, 10] smbd/trans2.c:set_bad_path_error(2191)
>  set_bad_path_error: err = 2 bad_path = 0
>[2006/06/21 14:19:27, 3] smbd/error.c:error_packet(105)
>  error string = No such file or directory
>[2006/06/21 14:19:27, 3] smbd/error.c:error_packet(129)
>  error packet at smbd/trans2.c(2197) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=14209
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 76
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x4c
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6249 of length 80
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40833
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 EC 03 00 00 00  00 00 00                 ........ ...
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13042) conn 0x8339450
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: .
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning d
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2586)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfilepathinfo(2596)
>  SMB_QFBI - create: Sat Jun 17 16:10:26 2006
>   access: Wed Jun 21 14:18:32 2006
>   write: Sat Jun 17 16:10:26 2006
>   change: Sat Jun 17 16:10:26 2006
>   mode: 10
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,104)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,104) wrote 104
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 70
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x46
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6250 of length 74
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40897
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 02 01                                    ..... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13042) conn 0x8339450
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfsinfo(1775)
>  call_trans2qfsinfo: level = 258
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfsinfo(1881)
>  call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 8, vol=Software serv=Software
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 34, useable_space = 131012
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 0, data_to_send = 34, paramsize = 0, datasize = 34
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,94)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,94) wrote 94
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2qfsinfo(2065)
>  SMBtrans2 info_level = 258
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8269 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23232
>  smt_wct=3
>  smb_vwv[ 0]= 5302 (0x14B6)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=20 fnum=5302 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 5
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 1
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 4 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 5302 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23232
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 102
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x66
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8270 of length 106
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=102
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=408
>  smb_uid=100
>  smb_mid=23296
>  smt_wct=15
>  smb_vwv[ 0]=   34 (0x22)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   34 (0x22)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=37
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 16 00 56 05 07  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 73 00 74 00 61 00 72  00 74 00 2E 00 74 00 78  .s.t.a.r .t...t.x
>  [020] 00 74 00 00 00                                    .t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13036) conn 0x832ef00
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "start.txt"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [START.TXT]
>[2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135)
>  stat_cache_add: Added entry (831f2a8:sizea) START.TXT -> start.txt
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170)
>  conversion finished start.txt -> start.txt
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404)
>  dir=./, mask = start.txt
>[2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371)
>  dptr_create dir=./
>[2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431)
>  dptr_num is 256, wcard = start.txt, attr = 22
>[2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436)
>  dirpath=<./> dontdescend=<>
>[2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869)
>  get_lanman2_dir_entry:readdir on dirptr 0x83201b0 now at offset -1
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: ./start.txt
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning 
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning 
>[2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959)
>  get_lanman2_dir_entry found ./start.txt fname=start.txt
>[2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220)
>  closing dptr key 256
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,184)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,184) wrote 184
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518)
>  SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8659 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=45184
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 1229, fnum = 5325 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 5
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 5325, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=176
>  smb_uid=100
>  smb_mid=45184
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=52480 (0xCD00)
>  smb_vwv[ 3]=  276 (0x114)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8660 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45248
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5325 (0x14CD)
>  smb_vwv[ 3]=   61 (0x3D)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 61, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 61 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 61 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 61, size = 8192, returned 72
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5325 max=8192 nread=72
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=131
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45248
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   72 (0x48)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=72
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 53 3A 0D 0A 63 64 20 22  5C 61 6D 62 72 61 73 6F  S:..cd " \ambraso
>  [010] 66 74 5C 74 61 66 65 6C  20 74 6F 74 61 61 6C 22  ft\tafel  totaal"
>  [020] 0D 0A 3A 33 30 0D 0A 73  74 61 72 74 20 2F 77 20  ..:30..s tart /w 
>  [030] 74 73 63 68 6C 6D 65 6E  75 2E 65 78 65 0D 0A 67  tschlmen u.exe..g
>  [040] 6F 74 6F 20 31 30 0D 0A                           oto 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,135)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,135) wrote 135
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8661 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45248
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5325 (0x14CD)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8120 (0x1FB8)
>  smb_vwv[ 6]= 8120 (0x1FB8)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8120 (0x1FB8)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8120
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 8120 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 8120 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8120, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=5325 max=8120 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45248
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2500 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=10496
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 527, fnum = 4623 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 24. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 6
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 4623, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=448
>  smb_uid=100
>  smb_mid=10496
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 3840 (0xF00)
>  smb_vwv[ 3]=  274 (0x112)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2501 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10560
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4623 (0x120F)
>  smb_vwv[ 3]=   61 (0x3D)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]= 8192 (0x2000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8192 (0x2000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 61, count_out = 8192
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 61 8192 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 61 8192 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=61 len=8192 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 61, size = 8192, returned 72
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4623 max=8192 nread=72
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=131
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10560
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   72 (0x48)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=72
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 53 3A 0D 0A 63 64 20 22  5C 61 6D 62 72 61 73 6F  S:..cd " \ambraso
>  [010] 66 74 5C 74 61 66 65 6C  20 74 6F 74 61 61 6C 22  ft\tafel  totaal"
>  [020] 0D 0A 3A 33 30 0D 0A 73  74 61 72 74 20 2F 77 20  ..:30..s tart /w 
>  [030] 74 73 63 68 6C 6D 65 6E  75 2E 65 78 65 0D 0A 67  tschlmen u.exe..g
>  [040] 6F 74 6F 20 31 30 0D 0A                           oto 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,135)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,135) wrote 135
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2502 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10560
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4623 (0x120F)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8120 (0x1FB8)
>  smb_vwv[ 6]= 8120 (0x1FB8)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 8120 (0x1FB8)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 8120
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 24 12 133 8120 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 24 12 133 8120 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=8120 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 8120, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4623 max=8120 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10560
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3774 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3139
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4833 (0x12E1)
>  smb_vwv[ 3]=   56 (0x38)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 56, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 56, size = 512, returned 77
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4833 max=512 nread=77
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=136
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3139
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   77 (0x4D)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=77
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 32 30 0D 0A 53 3A 0D  0A 63 64 20 22 5C 61 6D  :20..S:. .cd "\am
>  [010] 62 72 61 73 6F 66 74 5C  74 61 66 65 6C 20 74 6F  brasoft\ tafel to
>  [020] 74 61 61 6C 22 0D 0A 3A  33 30 0D 0A 73 74 61 72  taal"..: 30..star
>  [030] 74 20 2F 77 20 74 73 63  68 6C 6D 65 6E 75 2E 65  t /w tsc hlmenu.e
>  [040] 78 65 0D 0A 67 6F 74 6F  20 31 30 0D 0A           xe..goto  10..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,140)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,140) wrote 140
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3775 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3139
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4833 (0x12E1)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  435 (0x1B3)
>  smb_vwv[ 6]=  435 (0x1B3)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  435 (0x1B3)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 435
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 435, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=4833 max=435 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3139
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3776 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3203
>  smt_wct=3
>  smb_vwv[ 0]= 4833 (0x12E1)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13021) conn 0x83319b0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=4833 (numopen=2)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 6
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 4
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 5 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=1) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4833 (1 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3203
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14171 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=65024
>  smt_wct=3
>  smb_vwv[ 0]= 6152 (0x1808)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=6152 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 5
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 2
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 4 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 6152 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=65024
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14486 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61249
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6240 (0x1860)
>  smb_vwv[ 3]=   56 (0x38)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 102
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x66
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14172 of length 106
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=102
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1824
>  smb_uid=100
>  smb_mid=65088
>  smt_wct=15
>  smb_vwv[ 0]=   34 (0x22)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   34 (0x22)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=37
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 16 00 56 05 07  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 73 00 74 00 61 00 72  00 74 00 2E 00 74 00 78  .s.t.a.r .t...t.x
>  [020] 00 74 00 00 00                                    .t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "start.txt"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210)
>  stat_cache_lookup: lookup failed for name [START.TXT]
>[2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135)
>  stat_cache_add: Added entry (82b5558:sizea) START.TXT -> start.txt
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170)
>  conversion finished start.txt -> start.txt
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404)
>  dir=./, mask = start.txt
>[2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371)
>  dptr_create dir=./
>[2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431)
>  dptr_num is 256, wcard = start.txt, attr = 22
>[2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436)
>  dirpath=<./> dontdescend=<>
>[2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869)
>  get_lanman2_dir_entry:readdir on dirptr 0x82bde80 now at offset -1
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: ./start.txt
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning 
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning 
>[2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959)
>  get_lanman2_dir_entry found ./start.txt fname=start.txt
>[2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220)
>  closing dptr key 256
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,184)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,184) wrote 184
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518)
>  SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14173 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1824
>  smb_uid=100
>  smb_mid=65152
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 56, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 56, size = 512, returned 77
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6240 max=512 nread=77
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=136
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61249
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   77 (0x4D)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=77
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 3A 32 30 0D 0A 53 3A 0D  0A 63 64 20 22 5C 61 6D  :20..S:. .cd "\am
>  [010] 62 72 61 73 6F 66 74 5C  74 61 66 65 6C 20 74 6F  brasoft\ tafel to
>  [020] 74 61 61 6C 22 0D 0A 3A  33 30 0D 0A 73 74 61 72  taal"..: 30..star
>  [030] 74 20 2F 77 20 74 73 63  68 6C 6D 65 6E 75 2E 65  t /w tsc hlmenu.e
>  [040] 78 65 0D 0A 67 6F 74 6F  20 31 30 0D 0A           xe..goto  10..
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,140)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,140) wrote 140
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14487 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61249
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6240 (0x1860)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  435 (0x1B3)
>  smb_vwv[ 6]=  435 (0x1B3)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  435 (0x1B3)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 435
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 435 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=435 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 435, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6240 max=435 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61249
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14488 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61313
>  smt_wct=3
>  smb_vwv[ 0]= 6240 (0x1860)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=7 fnum=6240 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 4
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 2
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 3 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 6240 (0 used)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=61313
>  smt_wct=0
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,39)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,39) wrote 39
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 2057, fnum = 6153 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 4
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 6153, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1824
>  smb_uid=100
>  smb_mid=65152
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 2304 (0x900)
>  smb_vwv[ 3]=  280 (0x118)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 72
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x48
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14174 of length 76
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1824
>  smb_uid=100
>  smb_mid=65216
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 09 18 ED 03                              ....... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo Ambra.bat (fnum = 6153) level=1005 call=7 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,88)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,88) wrote 88
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14175 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=65280
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6153 (0x1809)
>  smb_vwv[ 3]=   47 (0x2F)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 47, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 47 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=47 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 47, size = 512, returned 86
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6153 max=512 nread=86
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=145
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=65280
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   86 (0x56)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=86
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 67 6F 74 6F 20 31 30 0D  0A 3A 32 30 0D 0A 53 3A  goto 10. .:20..S:
>  [010] 0D 0A 63 64 20 22 5C 61  6D 62 72 61 73 6F 66 74  ..cd "\a mbrasoft
>  [020] 5C 74 61 66 65 6C 20 74  6F 74 61 61 6C 22 0D 0A  \tafel t otaal"..
>  [030] 3A 33 30 0D 0A 73 74 61  72 74 20 2F 77 20 74 73  :30..sta rt /w ts
>  [040] 63 68 6C 6D 65 6E 75 2E  65 78 65 0D 0A 67 6F 74  chlmenu. exe..got
>  [050] 6F 20 31 30 0D 0A                                 o 10.. 
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,149)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,149) wrote 149
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14176 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=65280
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6153 (0x1809)
>  smb_vwv[ 3]=  133 (0x85)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  426 (0x1AA)
>  smb_vwv[ 6]=  426 (0x1AA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  426 (0x1AA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 133, count_out = 426
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 133 426 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>  is_locked: posix start=133 len=426 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101)
>  read_file (Ambra.bat): pos = 133, size = 426, returned 0
>[2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257)
>  send_file_readX fnum=6153 max=426 nread=0
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=65280
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,63)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,63) wrote 63
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 76
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x4c
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11621 of length 80
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=14273
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 EC 03 00 00 00  00 00 00                 ........ ...
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13032) conn 0x83393b8
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: .
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning d
>[2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2586)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfilepathinfo(2596)
>  SMB_QFBI - create: Sat Jun 17 16:10:26 2006
>   access: Wed Jun 21 14:18:32 2006
>   write: Sat Jun 17 16:10:26 2006
>   change: Sat Jun 17 16:10:26 2006
>   mode: 10
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,104)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,104) wrote 104
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 70
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x46
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11622 of length 74
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=14337
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 00 00 02 01                                    ..... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans2 (pid 13032) conn 0x83393b8
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfsinfo(1775)
>  call_trans2qfsinfo: level = 258
>[2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfsinfo(1881)
>  call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 8, vol=Software serv=Software
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 34, useable_space = 131012
>[2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558)
>  t2_rep: params_to_send = 0, data_to_send = 34, paramsize = 0, datasize = 34
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,94)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,94) wrote 94
>[2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2qfsinfo(2065)
>  SMBtrans2 info_level = 258
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6251 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40961
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13042) conn 0x832e9c0
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 4] smbd/vfs.c:vfs_ChDir(660)
>  vfs_ChDir to /home/data/Datamap/andoburg
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>  map_create_disposition: Mapped create_disposition 0x1 to 0x1
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480)
>  map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40
>[2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "Ambra.bat"
>[2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243)
>  stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat]
>[2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111)
>  unix_mode(Ambra.bat) returning 0744
>[2006/06/21 14:19:27, 5] smbd/files.c:file_new(129)
>  allocated file structure 600, fnum = 4696 (1 used)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047)
>  open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480)
>  get_share_modes: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50)
>  fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 20. 
>[2006/06/21 14:19:27, 2] smbd/open.c:open_file(245)
>  andoburg opened file Ambra.bat read=Yes write=No (numopen=1)
>[2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380)
>  open_file_shared : share_mode = 40
>[2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723)
>  set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 5
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 304, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283)
>  dos_mode: Ambra.bat
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning a
>[2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315)
>  dos_mode returning a
>[2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024)
>  reply_ntcreate_and_X: fnum = 4696, open name = Ambra.bat
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=2016
>  smb_uid=100
>  smb_mid=40961
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=22528 (0x5800)
>  smb_vwv[ 3]=  274 (0x112)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=15982 (0x3E6E)
>  smb_vwv[ 7]= 6618 (0x19DA)
>  smb_vwv[ 8]=50834 (0xC692)
>  smb_vwv[ 9]=32769 (0x8001)
>  smb_vwv[10]=22385 (0x5771)
>  smb_vwv[11]=11504 (0x2CF0)
>  smb_vwv[12]=50837 (0xC695)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=15982 (0x3E6E)
>  smb_vwv[15]= 6618 (0x19DA)
>  smb_vwv[16]=50834 (0xC692)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=15982 (0x3E6E)
>  smb_vwv[19]= 6618 (0x19DA)
>  smb_vwv[20]=50834 (0xC692)
>  smb_vwv[21]= 8193 (0x2001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=34048 (0x8500)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449)
>  write_socket(27,107)
>[2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452)
>  write_socket(27,107) wrote 107
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 6252 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8271 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 8662 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=45312
>  smt_wct=3
>  smb_vwv[ 0]= 5325 (0x14CD)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13031) conn 0x832f030
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 2503 of length 45
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=10624
>  smt_wct=3
>  smb_vwv[ 0]= 4623 (0x120F)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 13040) conn 0x832f130
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887)
>  close fd=24 fnum=4623 (numopen=1)
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609)
>  del_share_entry: num_share_modes = 5
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614)
>  del_share_entry: deleted share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624)
>  del_share_entry: deleting entry 3
>[2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646)
>  del_share_entry: Remaining table.
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 866, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 304, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432)
>  print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358
>[2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201)
>  close_normal_file: share_entry_count = 4 for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240)
>  posix_locking_close_file: file Ambra.bat has no outstanding locks.
>[2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272)
>  andoburg closed file Ambra.bat (numopen=0) 
>[2006/06/21 14:19:27, 5] smbd/files.c:file_free(439)
>  freed files structure 4623 (0 used)
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 3777 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1748
>  smb_uid=101
>  smb_mid=3267
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14489 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=488
>  smb_uid=100
>  smb_mid=61377
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13028) conn 0x832ee88
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0
>[2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341)
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 59
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x3b
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 14177 of length 63
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=65344
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 6153 (0x1809)
>  smb_vwv[ 3]=   56 (0x38)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  512 (0x200)
>  smb_vwv[ 6]=  512 (0x200)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  512 (0x200)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBreadX (pid 13025) conn 0x832f110
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 1002 and contains 3 supplementary groups
>  Group[  0]: 1002
>  Group[  1]: 0
>  Group[  2]: 10001
>[2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,0) gid=(0,1002)
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101)
>  is_locked: brl start=56 len=512 unlocked for file Ambra.bat
>[2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697)
>  is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ
>[2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633)
>  posix_lock_in_range: offset_out = 56, count_out = 512
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650)
>  posix_fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759)
>  fcntl_lock 7 12 56 512 0
>[2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680)
>  posix_fcntl_lock: Lock call failed
>[2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113)
>[2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 106
>[2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x6a
>[2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091)
>  Transaction 11623 of length 110
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(464)
>[2006/06/21 14:19:27, 5] lib/util.c:show_msg(474)
>  size=106
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1260
>  smb_uid=100
>  smb_mid=14401
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5120 (0x1400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=23
>[2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 41 00 6D 00 62  00 72 00 61 00 2E 00 62  .\.A.m.b .r.a...b
>  [010] 00 61 00 74 00 00 00                              .a.t... 
>[2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 13032) conn 0x832ef20
>[2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2969752157-892696647-4271518216-3002
>  SID[  1]: S-1-5-21-2969752157-892696647-4271518216-3003
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2969752157-892696647-4271518216-3005
>  SID[  6]: S-1-5-21-2969752157-892696647-4271518216-1001
>  SID[  7]: S-1-5-21-2969752157-892696647-4271518216-512
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)

Actions: View

Attachments on bug 3817: 1927 | 1928 | 1959 | 1961 | 1973 | 1974 | 1975