The Samba-Bugzilla – Attachment 1979 Details for
Bug 3853
msdfs broken (similar to bug 1406)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
smb startup log with debug 10
smb.log_startup (text/plain), 689.34 KB, created by
rajeev
on 2006-06-23 11:50:39 UTC
(
hide
)
Description:
smb startup log with debug 10
Filename:
MIME Type:
Creator:
rajeev
Created:
2006-06-23 11:50:39 UTC
Size:
689.34 KB
patch
obsolete
>[2006/06/23 12:36:52, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:36:52, 2] lib/interface.c:add_interface(81) > added interface ip=172.17.49.12 bcast=172.17.49.255 nmask=255.255.255.0 >[2006/06/23 12:36:52, 5] lib/util.c:init_names(260) > Netbios name list:- > my_netbios_names[0]="IBRIX2" >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_context_list(950) > Trying to load: smbpasswd >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend ldapsam >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'ldapsam' >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend ldapsam_compat >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'ldapsam_compat' >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend NDS_ldapsam >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'NDS_ldapsam' >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend NDS_ldapsam_compat >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'NDS_ldapsam_compat' >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend smbpasswd >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'smbpasswd' >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend tdbsam >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'tdbsam' >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) > Attempting to register passdb backend guest >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) > Successfully added passdb backend 'guest' >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(822) > Attempting to find an passdb backend to match smbpasswd (smbpasswd) >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(843) > Found pdb backend smbpasswd >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(846) > pdb backend smbpasswd has a valid init >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(822) > Attempting to find an passdb backend to match guest (guest) >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(843) > Found pdb backend guest >[2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(846) > pdb backend guest has a valid init >[2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1371) > smbpasswd_getsampwrid: search by sid: S-1-5-21-1055192801-1434710095-1259064960-501 >[2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1322) > getsampwnam (smbpasswd): search by name: nobody >[2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) > startsmbfilepwent_internal: opening file /usr/local/samba/private/smbpasswd >[2006/06/23 12:36:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(539) > getsmbfilepwent: end of file reached. >[2006/06/23 12:36:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) > endsmbfilepwent_internal: closed password file. >[2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_username(617) > pdb_set_username: setting username nobody, was >[2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) > pdb_set_full_name: setting full name nobody, was >[2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_domain(644) > pdb_set_domain: setting domain IBRIX2, was >[2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) > pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-501 >[2006/06/23 12:36:52, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-1055192801-1434710095-1259064960-501 from rid 501 >[2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) > pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-514 >[2006/06/23 12:36:52, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) > pdb_set_group_sid_from_rid: > setting group sid S-1-5-21-1055192801-1434710095-1259064960-514 from rid 514 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:36:52, 10] lib/system_smbd.c:sys_getgrouplist(167) > sys_getgrouplist: user [nobody] >[2006/06/23 12:36:52, 10] lib/system_smbd.c:sys_getgrouplist(176) > sys_getgrouplist(): disabled winbindd for group lookup [user == nobody] >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:36:52, 8] lib/system_smbd.c:remove_duplicate_gids(49) > remove_duplicate_gids: Enter 3 gids >[2006/06/23 12:36:52, 8] lib/system_smbd.c:remove_duplicate_gids(67) > remove_duplicate_gids: Exit 2 gids >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 99 -> S-1-5-21-1055192801-1434710095-1259064960-1199 >[2006/06/23 12:36:52, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 99 -> S-1-5-21-1055192801-1434710095-1259064960-1199 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 90 -> S-1-5-21-1055192801-1434710095-1259064960-1181 >[2006/06/23 12:36:52, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 90 -> S-1-5-21-1055192801-1434710095-1259064960-1181 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) > grant_privilege: S-1-1-0 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) > grant_privilege: S-1-5-32-544 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) > grant_privilege: S-1-5-32-548 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) > grant_privilege: S-1-5-32-549 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) > grant_privilege: S-1-5-32-550 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) > grant_privilege: S-1-5-32-551 > original privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 > new privilege mask: > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 10] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-1055192801-1434710095-1259064960-501 > contains 7 SIDs > SID[ 0]: S-1-5-21-1055192801-1434710095-1259064960-501 > SID[ 1]: S-1-5-21-1055192801-1434710095-1259064960-514 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > SID[ 5]: S-1-5-21-1055192801-1434710095-1259064960-1199 > SID[ 6]: S-1-5-21-1055192801-1434710095-1259064960-1181 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 5] auth/auth_util.c:make_server_info_sam(898) > make_server_info_sam: made server info for user nobody -> nobody >[2006/06/23 12:36:52, 3] smbd/server.c:main(840) > loaded services >[2006/06/23 12:36:52, 0] smbd/server.c:main(844) > standard input is not a socket, assuming -D option >[2006/06/23 12:36:52, 3] smbd/server.c:main(855) > Becoming a daemon. >[2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1820) > fcntl_lock 8 6 0 1 1 >[2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1855) > fcntl_lock: Lock call successful >[2006/06/23 12:36:52, 2] lib/tallocmsg.c:register_msg_pool_usage(61) > Registered MSG_REQ_POOL_USAGE >[2006/06/23 12:36:52, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) > Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED >[2006/06/23 12:36:52, 5] lib/gencache.c:gencache_init(59) > Opening cache file at /usr/local/samba/var/locks/gencache.tdb >[2006/06/23 12:36:52, 5] libsmb/namecache.c:namecache_enable(58) > namecache_enable: enabling netbios namecache, timeout 660 seconds >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Print] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] with subkey [Printers] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Ports] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [LanmanServer] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer] with subkey [Shares] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Eventlog] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [009] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [Monitors] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [ProductOptions] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Terminal Server] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server] with subkey [DefaultUserConfiguration] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [TcpIp] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp] with subkey [Parameters] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM] with subkey [SYSTEM] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Netlogon] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon] with subkey [Parameters] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKU] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKU] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKCR] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKCR] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKPD] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKPD] with subkey [NULL] >[2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) > init_registry_data: Adding [HKPT] >[2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) > init_registry_data: Storing key [HKPT] with subkey [NULL] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) > specific: [Samba Printer Port], len: 2 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) > specific: [DefaultSpoolDirectory], len: 70 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) > specific: [DisplayName], len: 20 >[2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) > specific: [ErrorControl], len: 4 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) > specific: [DisplayName], len: 20 >[2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) > specific: [ErrorControl], len: 4 >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) > pathtree_add: Enter >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) > pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) > pathtree_add: Exit >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) > pathtree_add: Enter >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) > pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) > pathtree_add: Exit >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) > pathtree_add: Enter >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) > pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) > pathtree_add: Exit >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) > reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) > pathtree_add: Enter >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) > pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree >[2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) > pathtree_add: Exit >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1322) > getsampwnam (smbpasswd): search by name: root >[2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) > startsmbfilepwent_internal: opening file /usr/local/samba/private/smbpasswd >[2006/06/23 12:36:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(539) > getsmbfilepwent: end of file reached. >[2006/06/23 12:36:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) > endsmbfilepwent_internal: closed password file. >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 4] passdb/passdb.c:local_uid_to_sid(1146) > local_uid_to_sid: User root [uid == 0] has no samba account >[2006/06/23 12:36:52, 8] passdb/passdb.c:algorithmic_uid_to_sid(1107) > algorithmic_uid_to_sid: falling back to RID algorithm >[2006/06/23 12:36:52, 10] passdb/passdb.c:algorithmic_uid_to_sid(1111) > Substituting charset 'UTF-8' for LOCALE > algorithmic_uid_to_sid: uid (0) -> SID S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 10] passdb/passdb.c:local_uid_to_sid(1154) > local_uid_to_sid: uid (0) -> SID S-1-5-21-1055192801-1434710095-1259064960-1000 (root). >[2006/06/23 12:36:52, 10] passdb/lookup_sid.c:uid_to_sid(364) >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > uid_to_sid: local 0 -> S-1-5-21-1055192801-1434710095-1259064960-1000 > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) >[2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) > Substituting charset 'UTF-8' for LOCALE > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:36:52, 10] passdb/passdb.c:local_gid_to_sid(1245) >[2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) > local_gid_to_sid: Fall back to algorithmic mapping: 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001 > Substituting charset 'UTF-8' for LOCALE >[2006/06/23 12:36:52, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001 >[2006/06/23 12:36:52, 10] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-1055192801-1434710095-1259064960-1000 > contains 6 SIDs > SID[ 0]: S-1-5-21-1055192801-1434710095-1259064960-1000 > SID[ 1]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-32-544 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (1) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 sec_io_desc sec_desc >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0000 revision : 0001 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0002 type : 8004 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 off_owner_sid: 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 off_grp_sid : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c off_sacl : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 off_dacl : 00000014 >[2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000014 sec_io_acl dacl >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 revision: 0002 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 num_aces : 00000004 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00001c sec_io_ace ace_list[00]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001c type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001d flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000020 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 mask: 0002018d >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0024 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0025 num_auths : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0026 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0027 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0029 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002a id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002b id_auth[5] : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 002c sub_auths : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001e size : 0014 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 sec_io_ace ace_list[01]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0030 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0031 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000034 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 mask: 000201fd >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0038 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0039 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0040 sub_auths : 00000020 00000223 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0032 size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000048 sec_io_ace ace_list[02]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0048 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0049 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00004c sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0050 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0051 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0052 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0053 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0054 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0055 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0056 id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0057 id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0058 sub_auths : 00000020 00000225 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 004a size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000060 sec_io_ace ace_list[03]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0060 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0061 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000064 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0064 mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000068 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0068 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0069 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0070 sub_auths : 00000020 00000220 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0062 size : 0018 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 size : 0064 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 sec_io_desc sec_desc >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0000 revision : 0001 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0002 type : 8004 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 off_owner_sid: 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 off_grp_sid : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c off_sacl : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 off_dacl : 00000014 >[2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000014 sec_io_acl dacl >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 revision: 0002 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 num_aces : 00000004 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00001c sec_io_ace ace_list[00]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001c type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001d flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000020 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 mask: 0002018d >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0024 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0025 num_auths : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0026 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0027 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0029 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002a id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002b id_auth[5] : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 002c sub_auths : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001e size : 0014 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 sec_io_ace ace_list[01]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0030 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0031 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000034 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 mask: 000201fd >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0038 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0039 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0040 sub_auths : 00000020 00000223 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0032 size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000048 sec_io_ace ace_list[02]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0048 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0049 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00004c sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0050 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0051 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0052 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0053 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0054 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0055 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0056 id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0057 id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0058 sub_auths : 00000020 00000225 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 004a size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000060 sec_io_ace ace_list[03]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0060 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0061 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000064 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0064 mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000068 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0068 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0069 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0070 sub_auths : 00000020 00000220 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0062 size : 0018 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 size : 0064 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 sec_io_desc sec_desc >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0000 revision : 0001 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0002 type : 8004 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 off_owner_sid: 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 off_grp_sid : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c off_sacl : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 off_dacl : 00000014 >[2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000014 sec_io_acl dacl >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 revision: 0002 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 num_aces : 00000004 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00001c sec_io_ace ace_list[00]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001c type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001d flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000020 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 mask: 0002018d >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0024 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0025 num_auths : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0026 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0027 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0029 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002a id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002b id_auth[5] : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 002c sub_auths : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001e size : 0014 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 sec_io_ace ace_list[01]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0030 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0031 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000034 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 mask: 000201fd >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0038 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0039 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0040 sub_auths : 00000020 00000223 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0032 size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000048 sec_io_ace ace_list[02]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0048 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0049 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00004c sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0050 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0051 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0052 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0053 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0054 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0055 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0056 id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0057 id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0058 sub_auths : 00000020 00000225 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 004a size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000060 sec_io_ace ace_list[03]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0060 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0061 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000064 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0064 mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000068 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0068 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0069 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0070 sub_auths : 00000020 00000220 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0062 size : 0018 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 size : 0064 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) > regdb_open: incrementing refcount (2) >[2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) > regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) > reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) > pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] >[2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) > pathtree_find: Exit >[2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) > registry_access_check: using root's token >[2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-544 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f > se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 >[2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (f003f) granted. >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 sec_io_desc sec_desc >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0000 revision : 0001 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0002 type : 8004 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 off_owner_sid: 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 off_grp_sid : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c off_sacl : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 off_dacl : 00000014 >[2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000014 sec_io_acl dacl >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 revision: 0002 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 num_aces : 00000004 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00001c sec_io_ace ace_list[00]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001c type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001d flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000020 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 mask: 0002018d >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0024 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0025 num_auths : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0026 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0027 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0029 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002a id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 002b id_auth[5] : 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 002c sub_auths : 00000000 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001e size : 0014 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 sec_io_ace ace_list[01]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0030 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0031 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000034 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 mask: 000201fd >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0038 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0039 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 003f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0040 sub_auths : 00000020 00000223 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0032 size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000048 sec_io_ace ace_list[02]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0048 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0049 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00004c sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0050 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0051 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0052 id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0053 id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0054 id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0055 id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0056 id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0057 id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0058 sub_auths : 00000020 00000225 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 004a size : 0018 >[2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000060 sec_io_ace ace_list[03]: >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0060 type : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0061 flags: 00 >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000064 sec_io_access info >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0064 mask: 000f01ff >[2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000068 smb_io_dom_sid trustee >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0068 sid_rev_num: 01 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0069 num_auths : 02 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006a id_auth[0] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006b id_auth[1] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006c id_auth[2] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006d id_auth[3] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006e id_auth[4] : 00 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 006f id_auth[5] : 05 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 0070 sub_auths : 00000020 00000220 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0062 size : 0018 >[2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 size : 0064 >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) > regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (2) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (1) >[2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) > regdb_close: decrementing refcount (0) >[2006/06/23 12:36:52, 10] printing/nt_printing.c:update_c_setprinter(689) > update_c_setprinter: c_setprinter = 0 >[2006/06/23 12:36:52, 6] libads/ldap.c:ads_find_dc(217) > ads_find_dc: looking for realm 'TIGR.ORG' >[2006/06/23 12:36:52, 8] libsmb/namequery.c:get_sorted_dc_list(1433) > get_sorted_dc_list: attempting lookup using [ads] >[2006/06/23 12:36:52, 10] libsmb/namequery.c:internal_resolve_name(1028) > internal_resolve_name: looking up dc.tigr.org#20 >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(272) > Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 > >[2006/06/23 12:36:52, 5] libsmb/namecache.c:namecache_fetch(201) > name dc.tigr.org#20 found. >[2006/06/23 12:36:52, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2006/06/23 12:36:52, 4] libsmb/namequery.c:get_dc_list(1406) > get_dc_list: returning 1 ip addresses in an ordered list >[2006/06/23 12:36:52, 4] libsmb/namequery.c:get_dc_list(1407) > get_dc_list: 172.17.5.33:389 >[2006/06/23 12:36:52, 5] libads/ldap.c:ads_try_connect(126) > ads_try_connect: trying ldap server '172.17.5.33' port 389 >[2006/06/23 12:36:52, 3] libads/ldap.c:ads_connect(288) > Connected to LDAP server 172.17.5.33 >[2006/06/23 12:36:52, 3] libads/ldap.c:ads_server_info(2542) > got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG >[2006/06/23 12:36:52, 4] libads/ldap.c:ads_server_info(2548) > time offset is 0 seconds >[2006/06/23 12:36:52, 4] libads/sasl.c:ads_sasl_bind(455) > Found SASL mechanism GSS-SPNEGO >[2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) > ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 >[2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) > ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 >[2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) > ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 >[2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) > ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(219) > ads_sasl_spnego_bind: got server principal name =tigrdc2$@TIGR.ORG >[2006/06/23 12:36:52, 3] libsmb/clikrb5.c:ads_krb5_mk_req(479) > ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) >[2006/06/23 12:36:52, 3] nmbd/nmbd.c:reload_nmbd_services(298) > services not loaded >[2006/06/23 12:36:52, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:36:52, 5] lib/util.c:init_names(260) > Netbios name list:- > my_netbios_names[0]="IBRIX2" >[2006/06/23 12:36:52, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:36:52, 0] nmbd/nmbd.c:main(746) > standard input is not a socket, assuming -D option >[2006/06/23 12:36:52, 2] nmbd/nmbd.c:main(751) > Becoming a daemon. >[2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1820) > fcntl_lock 3 6 0 1 1 >[2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1855) > fcntl_lock: Lock call successful >[2006/06/23 12:36:52, 2] lib/tallocmsg.c:register_msg_pool_usage(61) > Registered MSG_REQ_POOL_USAGE >[2006/06/23 12:36:52, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) > Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED >[2006/06/23 12:36:52, 4] lib/time.c:TimeInit(142) > TimeInit: Serverzone is 14400 >[2006/06/23 12:36:52, 3] nmbd/nmbd.c:main(789) > Opening sockets 137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) > bind succeeded on port 137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) > bind succeeded on port 138 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_NODELAY. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPCNT. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPIDLE. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPINTVL. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_NODELAY. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPCNT. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPIDLE. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPINTVL. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 3] nmbd/nmbd.c:open_sockets(648) > open_sockets: Broadcast sockets opened. >[2006/06/23 12:36:52, 2] lib/interface.c:add_interface(81) > added interface ip=172.17.49.12 bcast=172.17.49.255 nmask=255.255.255.0 >[2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) > bind succeeded on port 137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) > bind succeeded on port 138 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_NODELAY. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPCNT. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPIDLE. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPINTVL. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_NODELAY. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPCNT. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPIDLE. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) > Could not test socket option TCP_KEEPINTVL. >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 135168 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 2] nmbd/nmbd_subnetdb.c:make_subnet(173) > making subnet name:172.17.49.12 Broadcast address:172.17.49.255 Subnet mask:255.255.255.0 >[2006/06/23 12:36:52, 2] nmbd/nmbd_subnetdb.c:make_subnet(173) > making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0.0 >[2006/06/23 12:36:52, 2] nmbd/nmbd_subnetdb.c:make_subnet(173) > making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0.0 >[2006/06/23 12:36:52, 4] libsmb/namequery.c:startlmhosts(548) > startlmhosts: Can't open lmhosts file /usr/local/samba/lib/lmhosts. Error was No such file or directory >[2006/06/23 12:36:52, 2] nmbd/nmbd_lmhosts.c:load_lmhosts_file(41) > load_lmhosts_file: Can't open lmhosts file /usr/local/samba/lib/lmhosts. Error was No such file or directory >[2006/06/23 12:36:52, 3] nmbd/nmbd.c:main(808) > Loaded hosts file /usr/local/samba/lib/lmhosts >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:create_workgroup_on_subnet(197) > create_workgroup_on_subnet: creating group TIGR on subnet 172.17.49.12 >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "*<20>", "*<00>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<00>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) > initiate_name_register_packet: sending registration for name IBRIX2<20> (bcast=Yes) to IP 172.17.49.255 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8756 to subnet 172.17.49.12. num_records:1 >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) > initiate_name_register_packet: sending registration for name IBRIX2<03> (bcast=Yes) to IP 172.17.49.255 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8757 to subnet 172.17.49.12. num_records:2 >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) > initiate_name_register_packet: sending registration for name IBRIX2<00> (bcast=Yes) to IP 172.17.49.255 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8758 to subnet 172.17.49.12. num_records:3 >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) > initiate_name_register_packet: sending registration for name TIGR<00> (bcast=Yes) to IP 172.17.49.255 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8759 to subnet 172.17.49.12. num_records:4 >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) > initiate_name_register_packet: sending registration for name TIGR<1e> (bcast=Yes) to IP 172.17.49.255 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8760 to subnet 172.17.49.12. num_records:5 >[2006/06/23 12:36:52, 8] lib/util.c:is_myname(1879) > is_myname("IBRIX2") returns 1 >[2006/06/23 12:36:52, 3] nmbd/nmbd_serverlistdb.c:create_server_on_workgroup(159) > create_server_on_workgroup: Created server entry IBRIX2 of type 40809b03 (ibrix2) on workgroup TIGR. >[2006/06/23 12:36:52, 3] nmbd/nmbd_workgroupdb.c:initiate_myworkgroup_startup(267) > initiate_myworkgroup_startup: Added server name entry IBRIX2 on subnet 172.17.49.12 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:create_workgroup_on_subnet(197) > create_workgroup_on_subnet: creating group TIGR on subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "*<20>", "*<00>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<00>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<20>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name IBRIX2<20> with first IP 172.17.49.12 ttl=259200 nb_flags=64 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 5] lib/gencache.c:gencache_init(59) > Opening cache file at /usr/local/samba/var/locks/gencache.tdb >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) > Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.17.5.33 is alive >[2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) > Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 >[2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) > Registering name IBRIX2<20> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_multihomed_name_register_packet(362) > initiate_multihomed_name_register_packet: sending registration for name IBRIX2<20> IP 172.17.49.12 (bcast=No) to IP 172.17.5.33 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.5.33) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8761 to subnet UNICAST_SUBNET. num_records:6 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<03>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name IBRIX2<03> with first IP 172.17.49.12 ttl=259200 nb_flags=64 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) > Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.17.5.33 is alive >[2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) > Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 >[2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) > Registering name IBRIX2<03> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_multihomed_name_register_packet(362) > initiate_multihomed_name_register_packet: sending registration for name IBRIX2<03> IP 172.17.49.12 (bcast=No) to IP 172.17.5.33 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.5.33) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8762 to subnet UNICAST_SUBNET. num_records:7 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name IBRIX2<00> with first IP 172.17.49.12 ttl=259200 nb_flags=64 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) > Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.17.5.33 is alive >[2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) > Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 >[2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) > Registering name IBRIX2<00> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_multihomed_name_register_packet(362) > initiate_multihomed_name_register_packet: sending registration for name IBRIX2<00> IP 172.17.49.12 (bcast=No) to IP 172.17.5.33 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.5.33) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8763 to subnet UNICAST_SUBNET. num_records:8 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name TIGR<00> with first IP 172.17.49.12 ttl=259200 nb_flags=e4 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) > Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.17.5.33 is alive >[2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) > Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 >[2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) > Registering name TIGR<00> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) > initiate_name_register_packet: sending registration for name TIGR<00> (bcast=No) to IP 172.17.5.33 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.5.33) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8764 to subnet UNICAST_SUBNET. num_records:9 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name TIGR<1e> with first IP 172.17.49.12 ttl=259200 nb_flags=e4 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) > Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) > wins_srv_is_dead: 172.17.5.33 is alive >[2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) > Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 >[2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) > Registering name TIGR<1e> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) > initiate_name_register_packet: sending registration for name TIGR<1e> (bcast=No) to IP 172.17.5.33 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.5.33) on port 137 >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) > add_response_record: adding response record id:8765 to subnet UNICAST_SUBNET. num_records:10 >[2006/06/23 12:36:52, 8] lib/util.c:is_myname(1879) > is_myname("IBRIX2") returns 1 >[2006/06/23 12:36:52, 3] nmbd/nmbd_serverlistdb.c:create_server_on_workgroup(159) > create_server_on_workgroup: Created server entry IBRIX2 of type 40809b03 (ibrix2) on workgroup TIGR. >[2006/06/23 12:36:52, 3] nmbd/nmbd_workgroupdb.c:initiate_myworkgroup_startup(267) > initiate_myworkgroup_startup: Added server name entry IBRIX2 on subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "*<00>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "*<00>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "*<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "*<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "*<00>", "*<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "*<00>", "*<00>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "*<20>", "*<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "*<20>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "*<20>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "*<20>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<20>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<20>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<20>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "__SAMBA__<20>", "__SAMBA__<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "__SAMBA__<00>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<20>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "IBRIX2<20>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<20> source=2 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "IBRIX2<03>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<03> source=2 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "IBRIX2<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<00> source=2 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "TIGR<00>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<00> source=2 >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "TIGR<1e>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<1e> source=2 >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "*<20>", "*<00>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "__SAMBA__<00>", "*<20>", 84 ) >[2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8756 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8761 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 62 from (172.17.5.33) port 137 >[2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.17.5.33(137) header: id=8761 opcode=Registration(5) response=Yes > header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=IBRIX2<20> rr_type=32 rr_class=1 ttl=518400 > answers 0 char `...1. hex 6000AC11310C >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) > find_response_record: found response record id = 8761 on subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) > Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) > wins_srv_alive: marking wins server 172.17.5.33 alive >[2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) > register_name_response: success in registering WINS name IBRIX2<20> IP 172.17.49.12 with 172.17.5.33. >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<20>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "IBRIX2<20>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<20> source=2 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:52, 8] lib/util.c:is_myname(1879) > is_myname("IBRIX2") returns 1 >[2006/06/23 12:36:52, 3] nmbd/nmbd_sendannounce.c:send_host_announcement(208) > send_host_announcement: type 809b03 for host IBRIX2 on subnet 172.17.49.12 for workgroup TIGR >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:send_mailslot(1917) > send_mailslot: Sending to mailslot \MAILSLOT\BROWSE from IBRIX2<00> IP 172.17.49.12 to TIGR<1d> IP 172.17.49.255 >[2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:debug_browse_data(100) > debug_browse_data(): > 0 char ..`...IBRIX2.... hex 01 00 60 ea 00 00 49 42 52 49 58 32 00 00 00 00 > 10 char ..............U. hex 00 00 00 00 00 00 04 09 03 9b 80 00 0f 01 55 aa > 20 char ibrix2. hex 69 62 72 69 78 32 00 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 207 to (172.17.49.255) on port 138 >[2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8757 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8762 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 62 from (172.17.5.33) port 137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 138 read: 207 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 207 from (172.17.49.12) port 138 >[2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1829) > discarding own dgram packet from 172.17.49.12:138 >[2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.17.5.33(137) header: id=8762 opcode=Registration(5) response=Yes > header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=IBRIX2<03> rr_type=32 rr_class=1 ttl=518400 > answers 0 char `...1. hex 6000AC11310C >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) > find_response_record: found response record id = 8762 on subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) > Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) > wins_srv_alive: marking wins server 172.17.5.33 alive >[2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) > register_name_response: success in registering WINS name IBRIX2<03> IP 172.17.49.12 with 172.17.5.33. >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "IBRIX2<03>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<03> source=2 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8758 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8763 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 62 from (172.17.5.33) port 137 >[2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.17.5.33(137) header: id=8763 opcode=Registration(5) response=Yes > header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=IBRIX2<00> rr_type=32 rr_class=1 ttl=518400 > answers 0 char `...1. hex 6000AC11310C >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) > find_response_record: found response record id = 8763 on subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) > Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) > wins_srv_alive: marking wins server 172.17.5.33 alive >[2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) > register_name_response: success in registering WINS name IBRIX2<00> IP 172.17.49.12 with 172.17.5.33. >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "IBRIX2<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<00> source=2 >[2006/06/23 12:36:52, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(415) >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > Ticket in ccache[MEMORY:prtpub_cache] expiration Fri, 23 Jun 2006 22:36:52 EDT > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:52, 10] libsmb/clikrb5.c:ads_krb5_mk_req(508) >[2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > ads_krb5_mk_req: Ticket (tigrdc2$@TIGR.ORG) in ccache (MEMORY:prtpub_cache) is valid until: (Fri, 23 Jun 2006 22:36:52 EDT - 1151116612) > announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(610) >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > Got KRB5 session key of length 16 > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8759 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8764 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 62 from (172.17.5.33) port 137 >[2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.17.5.33(137) header: id=8764 opcode=Registration(5) response=Yes > header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=TIGR<00> rr_type=32 rr_class=1 ttl=518400 > answers 0 char ....1. hex E000AC11310C >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) > find_response_record: found response record id = 8764 on subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) > Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) > wins_srv_alive: marking wins server 172.17.5.33 alive >[2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) > register_name_response: success in registering WINS name TIGR<00> IP 172.17.49.12 with 172.17.5.33. >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<00>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "TIGR<00>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<00> source=2 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8760 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 >[2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8765 >[2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 62 from (172.17.5.33) port 137 >[2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.17.5.33(137) header: id=8765 opcode=Registration(5) response=Yes > header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=TIGR<1e> rr_type=32 rr_class=1 ttl=518400 > answers 0 char ....1. hex E000AC11310C >[2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) > find_response_record: found response record id = 8765 on subnet UNICAST_SUBNET >[2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) > Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) >[2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) > wins_srv_alive: marking wins server 172.17.5.33 alive >[2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) > register_name_response: success in registering WINS name TIGR<1e> IP 172.17.49.12 with 172.17.5.33. >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) >[2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >0 == memcmp( "TIGR<1e>", "TIGR<1e>", 84 ) >[2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<1e> source=2 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:52, 5] smbd/connection.c:claim_connection(170) > claiming 0 >[2006/06/23 12:36:52, 3] printing/printing.c:start_background_queue(1379) > start_background_queue: Starting background LPQ thread >[2006/06/23 12:36:52, 5] printing/printing.c:start_background_queue(1389) > start_background_queue: background LPQ thread started >[2006/06/23 12:36:52, 5] smbd/connection.c:claim_connection(170) > claiming smbd lpq backend 0 >[2006/06/23 12:36:52, 5] printing/printing.c:start_background_queue(1400) > start_background_queue: background LPQ thread waiting for messages >[2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) > bind succeeded on port 445 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 87380 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) > bind succeeded on port 139 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 87380 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:36:52, 2] smbd/server.c:open_sockets_smbd(336) > waiting for a connection >[2006/06/23 12:36:53, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:53, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 >[2006/06/23 12:36:53, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:53, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080613) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8756 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8757 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8758 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8759 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8760 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8756 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8757 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8758 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8759 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8760 >[2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:55, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:55, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 >[2006/06/23 12:36:55, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:55, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080615) - last(1151080612) < 900 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 68 to (172.17.49.255) on port 137 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8756 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) > retransmit_or_expire_response_records: timeout for packet id 8756 to IP 172.17.49.255 on subnet 172.17.49.12 >[2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) > register_name_timeout_response: success in registering name IBRIX2<20> on subnet 172.17.49.12. >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<20>", "*<20>", 84 ) >[2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) > find_name_on_subnet: on subnet 172.17.49.12 - name IBRIX2<20> NOT FOUND >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<20>", "*<20>", 84 ) >[2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name IBRIX2<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 >[2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) > retransmit_or_expire_response_records: timeout for packet id 8757 to IP 172.17.49.255 on subnet 172.17.49.12 >[2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) > register_name_timeout_response: success in registering name IBRIX2<03> on subnet 172.17.49.12. >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<03>", "*<20>", 84 ) >[2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) > find_name_on_subnet: on subnet 172.17.49.12 - name IBRIX2<03> NOT FOUND >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<03>", "*<20>", 84 ) >[2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name IBRIX2<03> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 >[2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) > retransmit_or_expire_response_records: timeout for packet id 8758 to IP 172.17.49.255 on subnet 172.17.49.12 >[2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) > register_name_timeout_response: success in registering name IBRIX2<00> on subnet 172.17.49.12. >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) >[2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) > find_name_on_subnet: on subnet 172.17.49.12 - name IBRIX2<00> NOT FOUND >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) >[2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name IBRIX2<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 >[2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) > retransmit_or_expire_response_records: timeout for packet id 8759 to IP 172.17.49.255 on subnet 172.17.49.12 >[2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) > register_name_timeout_response: success in registering name TIGR<00> on subnet 172.17.49.12. >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) > find_name_on_subnet: on subnet 172.17.49.12 - name TIGR<00> NOT FOUND >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name TIGR<00> with first IP 172.17.49.12 ttl=0 nb_flags=e0 to subnet 172.17.49.12 >[2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) > retransmit_or_expire_response_records: timeout for packet id 8760 to IP 172.17.49.255 on subnet 172.17.49.12 >[2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) > register_name_timeout_response: success in registering name TIGR<1e> on subnet 172.17.49.12. >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) > find_name_on_subnet: on subnet 172.17.49.12 - name TIGR<1e> NOT FOUND >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) >[2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) >nmbd_subnetdb:namelist_entry_compare() >-1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) >[2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) > add_name_to_subnet: Added netbios name TIGR<1e> with first IP 172.17.49.12 ttl=0 nb_flags=e0 to subnet 172.17.49.12 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8757 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8758 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8759 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) > read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 >[2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 8760 >[2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 68 from (172.17.49.12) port 137 >[2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) > discarding own bcast packet from 172.17.49.12:137 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:06, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:37:06, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 >[2006/06/23 12:37:06, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:06, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:37:16, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080626) - last(1151080612) < 900 >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) > dump_workgroups() > dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2) >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) > dump_workgroups() > dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2) >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:16, 8] lib/util.c:is_myname(1879) > is_myname("IBRIX2") returns 1 >[2006/06/23 12:37:16, 8] lib/util.c:is_myname(1879) > is_myname("IBRIX2") returns 1 >[2006/06/23 12:37:16, 3] nmbd/nmbd_serverlistdb.c:write_browse_list(421) > write_browse_list: Wrote browse list into file /usr/local/samba/var/locks/browse.dat >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:37:26, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080636) - last(1151080612) < 900 >[2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) > dump_workgroups() > dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2) >[2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) > dump_workgroups() > dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2) >[2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:37:31, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:37:31, 3] smbd/oplock.c:init_oplocks(871) > open_oplock_ipc: initializing messages. >[2006/06/23 12:37:31, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(259) > Linux kernel oplocks enabled >[2006/06/23 12:37:31, 4] lib/time.c:TimeInit(142) > TimeInit: Serverzone is 14400 >[2006/06/23 12:37:31, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:31, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:31, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 133 >[2006/06/23 12:37:31, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x85 >[2006/06/23 12:37:31, 3] smbd/process.c:process_smb(1194) > Transaction 0 of length 137 >[2006/06/23 12:37:31, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:31, 5] lib/util.c:show_msg(464) > size=133 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51283 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=0 > smb_bcc=98 >[2006/06/23 12:37:31, 10] lib/util.c:dump_data(2058) > [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG > [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 > [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for > [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. > [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM > [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 > [060] 32 00 2. >[2006/06/23 12:37:31, 3] smbd/process.c:switch_message(993) > switch message SMBnegprot (pid 23622) conn 0x0 >[2006/06/23 12:37:31, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:31, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:31, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:31, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) > Requested protocol [PC NETWORK PROGRAM 1.0] >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) > Requested protocol [LANMAN1.0] >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) > Requested protocol [Windows for Workgroups 3.1a] >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) > Requested protocol [LM1.2X002] >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) > Requested protocol [LANMAN2.1] >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) > Requested protocol [NT LM 0.12] >[2006/06/23 12:37:31, 10] lib/util.c:set_remote_arch(2033) > set_remote_arch: Client arch is 'Win2K' >[2006/06/23 12:37:31, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:37:31, 5] smbd/connection.c:claim_connection(170) > claiming 0 >[2006/06/23 12:37:31, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:37:31, 10] lib/util.c:name_to_fqdn(2675) > name_to_fqdn: lookup for IBRIX2 -> IBRIX2.tigr.org. >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_nt1(357) > using SPNEGO >[2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(579) > Selected protocol NT LM 0.12 >[2006/06/23 12:37:31, 5] smbd/negprot.c:reply_negprot(585) > negprot index=5 >[2006/06/23 12:37:31, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:31, 5] lib/util.c:show_msg(464) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=17 > smb_vwv[ 0]= 5 (0x5) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=17920 (0x4600) > smb_vwv[ 8]= 92 (0x5C) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=33011 (0x80F3) > smb_vwv[11]=32896 (0x8080) > smb_vwv[12]=22999 (0x59D7) > smb_vwv[13]=58194 (0xE352) > smb_vwv[14]=50838 (0xC696) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]=26880 (0x6900) > smb_bcc=105 >[2006/06/23 12:37:31, 10] lib/util.c:dump_data(2058) > [000] 69 62 72 69 78 32 00 00 00 00 00 00 00 00 00 00 ibrix2.. ........ > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 24 `W..+... ...M0K.$ > [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......* > [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... > [040] 37 02 02 0A A3 23 30 21 A0 1F 1B 1D 63 69 66 73 7....#0! ....cifs > [050] 2F 69 62 72 69 78 32 2E 74 69 67 72 2E 6F 72 67 /ibrix2. tigr.org > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/06/23 12:37:31, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:31, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:31, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:31, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:31, 3] smbd/process.c:process_smb(1194) > Transaction 1 of length 2096 >[2006/06/23 12:37:31, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:31, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=5760 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:31, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:31, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:31, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:31, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:31, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:31, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:31, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:31, 10] lib/util.c:set_remote_arch(2033) > set_remote_arch: Client arch is 'WinXP' >[2006/06/23 12:37:31, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 100 >[2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:31, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:31, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=100 > smb_mid=5760 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 1438 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x59e >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 2 of length 1442 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=1438 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=5824 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 1438 (0x59E) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1276 (0x4FC) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=1379 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ > [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ > [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... > [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... > [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. > [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. > [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. > [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. > [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. > [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p > [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., > [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ > [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L > [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. > [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... > [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. > [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... > [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... > [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< > [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. > [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL > [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. > [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 101 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1210 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=101 > smb_mid=5824 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 3 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=5888 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 102 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=102 > smb_mid=5888 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 4 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=5952 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 103 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=103 > smb_mid=5952 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 5 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6016 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 104 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=104 > smb_mid=6016 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 6 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6080 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 105 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=105 > smb_mid=6080 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 7 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6144 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 106 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=106 > smb_mid=6144 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 8 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6208 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 107 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=107 > smb_mid=6208 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 9 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6272 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 108 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=108 > smb_mid=6272 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 1438 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x59e >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 10 of length 1442 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=1438 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6336 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 1438 (0x59E) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1276 (0x4FC) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=1379 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ > [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ > [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... > [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... > [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. > [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. > [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. > [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. > [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. > [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p > [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., > [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ > [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L > [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. > [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... > [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. > [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... > [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... > [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< > [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. > [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL > [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. > [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 109 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1210 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=109 > smb_mid=6336 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 11 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6400 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 110 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=110 > smb_mid=6400 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 12 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6464 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 111 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=111 > smb_mid=6464 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 2092 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x82c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 13 of length 2096 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=2092 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6528 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 2092 (0x82C) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1930 (0x78A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=2033 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z > [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. > [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... > [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. > [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! > [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. > [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... > [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c > [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ..<o7..# > [120] C8 E2 11 EB 36 EF 4D DB EF 1E 01 4E 40 5F C9 53 ....6.M. ...N@_.S > [130] CB 85 D5 63 B7 D3 BF B7 E1 CE 5F 97 A4 F8 43 76 ...c.... .._...Cv > [140] 44 17 6F F9 DF 82 99 99 F7 94 81 32 36 62 86 75 D.o..... ...26b.u > [150] AB 4F F2 BF 7E 80 D4 C3 21 37 0F 30 BC B8 3E 12 .O..~... !7.0..>. > [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... > [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... > [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. > [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... > [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... > [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G > [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... > [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... > [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F > [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 112 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1864 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=112 > smb_mid=6528 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 1438 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x59e >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 14 of length 1442 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=1438 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6592 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 1438 (0x59E) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1276 (0x4FC) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=1379 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ > [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ > [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... > [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... > [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. > [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. > [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. > [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. > [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. > [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p > [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., > [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ > [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L > [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. > [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... > [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. > [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... > [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... > [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< > [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. > [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL > [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. > [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 113 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1210 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=113 > smb_mid=6592 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 236 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0xec >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 15 of length 240 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=236 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6656 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 236 (0xEC) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 74 (0x4A) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=177 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. > [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* > [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... > [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n > [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 > [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c > [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 > [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i > [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 > [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... > [0B0] 00 . >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 114 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 40 >[2006/06/23 12:37:32, 5] auth/auth.c:make_auth_context_subsystem(503) > Making default auth method list for security=ADS >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend rhosts >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'rhosts' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend hostsequiv >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'hostsequiv' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend sam >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'sam' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend sam_ignoredomain >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'sam_ignoredomain' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend unix >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'unix' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend winbind >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'winbind' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend smbserver >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'smbserver' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend trustdomain >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'trustdomain' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend ntdomain >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'ntdomain' >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) > Attempting to register auth backend guest >[2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) > Successfully added auth method 'guest' >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match guest >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method guest has a valid init >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match sam >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method sam has a valid init >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match winbind:ntdomain >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) > load_auth_module: Attempting to find an auth method to match ntdomain >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method ntdomain has a valid init >[2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) > load_auth_module: auth method winbind has a valid init >[2006/06/23 12:37:32, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) > Got NTLMSSP neg_flags=0xe2088297 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_NEGOTIATE_OEM > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_LM_KEY > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH > NTLMSSP_NEGOTIATE_56 >[2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module guest did not want to specify a challenge >[2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module sam did not want to specify a challenge >[2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(95) > auth_get_challenge: module winbind did not want to specify a challenge >[2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(135) > auth_context challenge created by random >[2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(136) > challenge is: >[2006/06/23 12:37:32, 5] lib/util.c:dump_data(2058) > [000] 9D D2 88 C8 06 DC CA 92 ........ >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=262 > smb_com=0x73 > smb_rcls=22 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=114 > smb_mid=6656 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 173 (0xAD) > smb_bcc=219 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] A1 81 AA 30 81 A7 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ > [010] 06 01 04 01 82 37 02 02 0A A2 81 91 04 81 8E 4E .....7.. .......N > [020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0 > [030] 00 00 00 B5 82 89 60 9D D2 88 C8 06 DC CA 92 00 ......`. ........ > [040] 00 00 00 00 00 00 00 56 00 56 00 38 00 00 00 54 .......V .V.8...T > [050] 00 49 00 47 00 52 00 02 00 08 00 54 00 49 00 47 .I.G.R.. ...T.I.G > [060] 00 52 00 01 00 0C 00 49 00 42 00 52 00 49 00 58 .R.....I .B.R.I.X > [070] 00 32 00 04 00 10 00 74 00 69 00 67 00 72 00 2E .2.....t .i.g.r.. > [080] 00 6F 00 72 00 67 00 03 00 1E 00 69 00 62 00 72 .o.r.g.. ...i.b.r > [090] 00 69 00 78 00 32 00 2E 00 74 00 69 00 67 00 72 .i.x.2.. .t.i.g.r > [0A0] 00 2E 00 6F 00 72 00 67 00 00 00 00 00 55 00 6E ...o.r.g .....U.n > [0B0] 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 .i.x...S .a.m.b.a > [0C0] 00 20 00 33 00 2E 00 30 00 2E 00 32 00 32 00 00 . .3...0 ...2.2.. > [0D0] 00 54 00 49 00 47 00 52 00 00 00 .T.I.G.R ... >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 350 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x15e >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 16 of length 354 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=350 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=114 > smb_mid=6720 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 350 (0x15E) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 188 (0xBC) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=291 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] A1 81 B9 30 81 B6 A2 81 B3 04 81 B0 4E 54 4C 4D ...0.... ....NTLM > [010] 53 53 50 00 03 00 00 00 18 00 18 00 70 00 00 00 SSP..... ....p... > [020] 18 00 18 00 88 00 00 00 08 00 08 00 48 00 00 00 ........ ....H... > [030] 0C 00 0C 00 50 00 00 00 14 00 14 00 5C 00 00 00 ....P... ....\... > [040] 10 00 10 00 A0 00 00 00 15 82 88 62 05 01 28 0A ........ ...b..(. > [050] 00 00 00 0F 54 00 49 00 47 00 52 00 72 00 61 00 ....T.I. G.R.r.a. > [060] 6A 00 65 00 65 00 76 00 4B 00 52 00 45 00 41 00 j.e.e.v. K.R.E.A. > [070] 50 00 45 00 52 00 2D 00 58 00 50 00 A7 8F E6 19 P.E.R.-. X.P..... > [080] 0A F6 F2 C6 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [090] 00 00 00 00 40 00 86 F8 C0 CF 14 00 38 7A 84 0C ....@... ....8z.. > [0A0] 24 E1 54 C6 F0 7C 5B 38 83 21 E7 A6 70 E3 23 9A $.T..|[8 .!..p.#. > [0B0] 72 BD 5E E0 0A 2E 1D AB 3D 72 F0 EA 00 57 00 69 r.^..... =r...W.i > [0C0] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 > [0D0] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i > [0E0] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. > [0F0] 00 32 00 20 00 32 00 36 00 30 00 30 00 00 00 57 .2. .2.6 .0.0...W > [100] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 .i.n.d.o .w.s. .2 > [110] 00 30 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 .0.0.2. .5...1.. > [120] 00 00 00 ... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(662) > Got user=[rajeev] domain=[TIGR] workstation=[KREAPER-XP] len1=24 len2=24 >[2006/06/23 12:37:32, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66) > auth_context challenge set by NTLMSSP callback (NTLM2) >[2006/06/23 12:37:32, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67) > challenge is: >[2006/06/23 12:37:32, 5] lib/util.c:dump_data(2058) > [000] A3 72 22 53 95 C3 E2 C7 .r"S.... >[2006/06/23 12:37:32, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info_map(163) > make_user_info_map: Mapping user [TIGR]\[rajeev] from workstation [KREAPER-XP] >[2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(272) > Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jun 23 12:45:46 2006 > >[2006/06/23 12:37:32, 10] lib/gencache.c:gencache_set(130) > Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Fri Jun 23 12:47:32 2006 > (600 seconds ahead) >[2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(43) > ads_dc_name: domain=TIGR >[2006/06/23 12:37:32, 6] libads/ldap.c:ads_find_dc(217) > ads_find_dc: looking for realm 'TIGR.ORG' >[2006/06/23 12:37:32, 8] libsmb/namequery.c:get_sorted_dc_list(1433) > get_sorted_dc_list: attempting lookup using [ads] >[2006/06/23 12:37:32, 10] libsmb/namequery.c:internal_resolve_name(1028) > internal_resolve_name: looking up dc.tigr.org#20 >[2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(272) > Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 > >[2006/06/23 12:37:32, 5] libsmb/namecache.c:namecache_fetch(201) > name dc.tigr.org#20 found. >[2006/06/23 12:37:32, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1406) > get_dc_list: returning 1 ip addresses in an ordered list >[2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1407) > get_dc_list: 172.17.5.33:389 >[2006/06/23 12:37:32, 5] libads/ldap.c:ads_try_connect(126) > ads_try_connect: trying ldap server '172.17.5.33' port 389 >[2006/06/23 12:37:32, 3] libads/ldap.c:ads_connect(288) > Connected to LDAP server 172.17.5.33 >[2006/06/23 12:37:32, 3] libads/ldap.c:ads_server_info(2542) > got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG >[2006/06/23 12:37:32, 4] libads/ldap.c:ads_server_info(2548) > time offset is 0 seconds >[2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(63) > ads_dc_name: using server='TIGRDC2' IP=172.17.5.33 >[2006/06/23 12:37:32, 3] libsmb/cliconnect.c:cli_start_connection(1389) > Connecting to host=TIGRDC2 >[2006/06/23 12:37:32, 3] lib/util_sock.c:open_socket_out(870) > Connecting to 172.17.5.33 at port 445 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,183) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,183) wrote 183 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 174 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=34688 (0x8780) > smb_vwv[12]=14395 (0x383B) > smb_vwv[13]=58195 (0xE353) > smb_vwv[14]=50838 (0xC696) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=34688 (0x8780) > smb_vwv[12]=14395 (0x383B) > smb_vwv[13]=58195 (0xE353) > smb_vwv[14]=50838 (0xC696) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,92) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,92) wrote 92 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 179 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=20482 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=20482 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,82) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,82) wrote 82 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 48 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_init_creds(233) > cli_init_creds: user domain >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,104) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,104) wrote 104 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 103 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 2560 (0xA00) > smb_vwv[ 3]= 384 (0x180) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[800a]: \lsarpc auth_type 0, auth_level 0 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. > [010] 00 00 00 00 .... >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0048 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0018 num_contexts: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001c context_id : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001e num_transfer_syntaxes: 01 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 data : 12345778 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0024 data : 1234 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0026 data : abcd >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0028 data : ef 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 002a data : 01 23 45 67 89 ab >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 version: 00000000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0038 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 003a data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003c data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003e data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32778 (0x800A) > smb_bcc=87 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,158) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,158) wrote 158 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 124 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 04 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 04 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a returned 68 bytes. >[2006/06/23 12:37:32, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a bind request returned ok. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 0106cb04 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0018 len: 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 001a str: \PIPE\lsass. >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 num_results: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 002c result : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 002e reason : 0000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0034 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0036 data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0038 data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003a data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0040 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine TIGRDC2 and bound anonymously. >[2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(142) > init_lsa_sec_qos >[2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_q_open_pol(261) > init_open_pol: attr:0 da:1 >[2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193) > init_lsa_obj_attr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_open_pol >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 ptr : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0004 system_name: 005c >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 lsa_io_obj_attr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 len : 00000018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c ptr_root_dir: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 ptr_obj_name: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 attributes : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 ptr_sec_desc: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 001c ptr_sec_qos : 00000001 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 lsa_io_obj_qos sec_qos >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 len : 0000000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0024 sec_imp_level : 0002 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0026 sec_ctxt_mode : 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0027 effective_only: 00 >[2006/06/23 12:37:32, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) > lsa_io_sec_qos: length c does not match size 8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 des_access: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000002 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 0000002c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 0006 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=150 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 68 (0x44) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32778 (0x800A) > smb_bcc=83 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., > [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... > [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ > [050] 00 00 00 ... >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,154) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,154) wrote 154 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 104 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 F9 BF 7A ........ .......z > [020] 6C 2C 2A 5F 4E 81 30 85 E0 2B FD AE 4B 00 00 00 l,*_N.0. .+..K... > [030] 00 . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 F9 BF 7A ........ .......z > [020] 6C 2C 2A 5F 4E 81 30 85 E0 2B FD AE 4B 00 00 00 l,*_N.0. .+..K... > [030] 00 . >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0030 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000002 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a returned 48 bytes. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_open_pol >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 data1: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 data2: 6c7abff9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 data3: 2a2c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a data4: 4e5f >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 000c data5: 81 30 85 e0 2b fd ae 4b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) > 0014 status: NT_STATUS_OK >[2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(477) > init_q_enum_trust_dom >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_enum_trust_dom >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 data1: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 data2: 6c7abff9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 data3: 2a2c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a data4: 4e5f >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 000c data5: 81 30 85 e0 2b fd ae 4b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 enum_context : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 preferred_len: 00010000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0034 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000003 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 0000001c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 000d >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=134 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 52 (0x34) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 52 (0x34) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32778 (0x800A) > smb_bcc=67 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ > [020] 00 00 00 00 00 0D 00 00 00 00 00 F9 BF 7A 6C 2C ........ .....zl, > [030] 2A 5F 4E 81 30 85 E0 2B FD AE 4B 00 00 00 00 00 *_N.0..+ ..K..... > [040] 00 01 00 ... >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,138) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,138) wrote 138 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 96 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0028 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000003 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000010 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 40 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a returned 32 bytes. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_enum_trust_dom >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 enum_context: 80000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 count: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 ptr: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) > 000c status: NT_STATUS_NO_MORE_ENTRIES >[2006/06/23 12:37:32, 10] libsmb/trusts_util.c:enumerate_domain_trusts(196) > enumerate_domain_trusts: shutting down connection... >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,45) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,45) wrote 45 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=8 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) > cli_rpc_pipe_close: closed pipe \lsarpc to machine TIGRDC2 >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,39) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,39) wrote 39 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=12290 > smb_pid=23622 > smb_uid=20482 > smb_mid=9 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(294) > Cache entry with key = TDOM/TIGR couldn't be found >[2006/06/23 12:37:32, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) > no entry for trusted domain TIGR found. >[2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info(69) > attempting to make a user_info for rajeev (rajeev) >[2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info(79) > making strings for rajeev's user_info struct >[2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info(121) > making blobs for rajeev's user_info struct >[2006/06/23 12:37:32, 10] auth/auth_util.c:make_user_info(139) > made an encrypted user_info for rajeev (rajeev) >[2006/06/23 12:37:32, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking password for unmapped user [TIGR]\[rajeev]@[KREAPER-XP] with the new password interface >[2006/06/23 12:37:32, 3] auth/auth.c:check_ntlm_password(222) > check_ntlm_password: mapped user is: [TIGR]\[rajeev]@[KREAPER-XP] >[2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(231) > check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) >[2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(233) > challenge is: >[2006/06/23 12:37:32, 5] lib/util.c:dump_data(2058) > [000] A3 72 22 53 95 C3 E2 C7 .r"S.... >[2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(259) > check_ntlm_password: guest had nothing to say >[2006/06/23 12:37:32, 8] lib/util.c:is_myname(1879) > is_myname("TIGR") returns 0 >[2006/06/23 12:37:32, 6] auth/auth_sam.c:check_samstrict_security(383) > check_samstrict_security: TIGR is not one of my local names (ROLE_DOMAIN_MEMBER) >[2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(259) > check_ntlm_password: sam had nothing to say >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(43) > ads_dc_name: domain=TIGR >[2006/06/23 12:37:32, 6] libads/ldap.c:ads_find_dc(217) > ads_find_dc: looking for realm 'TIGR.ORG' >[2006/06/23 12:37:32, 8] libsmb/namequery.c:get_sorted_dc_list(1433) > get_sorted_dc_list: attempting lookup using [ads] >[2006/06/23 12:37:32, 10] libsmb/namequery.c:internal_resolve_name(1028) > internal_resolve_name: looking up dc.tigr.org#20 >[2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(272) > Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 > >[2006/06/23 12:37:32, 5] libsmb/namecache.c:namecache_fetch(201) > name dc.tigr.org#20 found. >[2006/06/23 12:37:32, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1406) > get_dc_list: returning 1 ip addresses in an ordered list >[2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1407) > get_dc_list: 172.17.5.33:389 >[2006/06/23 12:37:32, 5] libads/ldap.c:ads_try_connect(126) > ads_try_connect: trying ldap server '172.17.5.33' port 389 >[2006/06/23 12:37:32, 3] libads/ldap.c:ads_connect(288) > Connected to LDAP server 172.17.5.33 >[2006/06/23 12:37:32, 3] libads/ldap.c:ads_server_info(2542) > got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG >[2006/06/23 12:37:32, 4] libads/ldap.c:ads_server_info(2548) > time offset is 0 seconds >[2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(63) > ads_dc_name: using server='TIGRDC2' IP=172.17.5.33 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for TIGRDC2 >[2006/06/23 12:37:32, 3] libsmb/cliconnect.c:cli_start_connection(1389) > Connecting to host=TIGRDC2 >[2006/06/23 12:37:32, 3] lib/util_sock.c:open_socket_out(870) > Connecting to 172.17.5.33 at port 445 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,183) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,183) wrote 183 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 174 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=19840 (0x4D80) > smb_vwv[12]=15616 (0x3D00) > smb_vwv[13]=58195 (0xE353) > smb_vwv[14]=50838 (0xC696) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=19840 (0x4D80) > smb_vwv[12]=15616 (0x3D00) > smb_vwv[13]=58195 (0xE353) > smb_vwv[14]=50838 (0xC696) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,92) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,92) wrote 92 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 179 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=12291 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=0 > smb_pid=23622 > smb_uid=12291 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,82) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,82) wrote 82 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 48 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_init_creds(233) > cli_init_creds: user domain >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,108) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,108) wrote 108 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 103 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 3072 (0xC00) > smb_vwv[ 3]= 384 (0x180) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[800c]: \NETLOGON auth_type 0, auth_level 0 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. > [010] 01 00 00 00 .... >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0048 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0018 num_contexts: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001c context_id : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001e num_transfer_syntaxes: 01 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 data : 12345678 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0024 data : 1234 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0026 data : abcd >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0028 data : ef 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 002a data : 01 23 45 67 cf fb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 version: 00000001 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0038 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 003a data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003c data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003e data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32780 (0x800C) > smb_bcc=87 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 04 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,158) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,158) wrote 158 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 124 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... > [010] 00 B8 10 B8 10 05 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... > [010] 00 B8 10 B8 10 05 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000004 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c returned 68 bytes. >[2006/06/23 12:37:32, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c bind request returned ok. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 0106cb05 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0018 len: 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 001a str: \PIPE\lsass. >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 num_results: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 002c result : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 002e reason : 0000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0034 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0036 data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0038 data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003a data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0040 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) > cli_rpc_pipe_open_noauth: opened pipe \NETLOGON to machine TIGRDC2 and bound anonymously. >[2006/06/23 12:37:32, 4] passdb/secrets.c:secrets_fetch_trust_account_password(282) > Using cleartext machine password >[2006/06/23 12:37:32, 4] rpc_client/cli_netlogon.c:rpccli_net_req_chal(46) > cli_net_req_chal: LSA Request Challenge from IBRIX2 to \\TIGRDC2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_req_chal(679) > init_q_req_chal: 679 >[2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_req_chal(688) > init_q_req_chal: 688 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_req_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 undoc_buffer: 00000001 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 uni_max_len: 0000000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c uni_str_len: 0000000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0010 buffer : \.\.T.I.G.R.D.C.2... >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0024 uni_max_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 002c uni_str_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0030 buffer : I.B.R.I.X.2... >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00003e smb_io_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003e data: 88 17 be e6 a0 15 8f 16 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 005e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000005 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000046 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 0004 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=176 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 94 (0x5E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 94 (0x5E) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32780 (0x800C) > smb_bcc=109 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 5E 00 00 00 05 00 00 00 46 .......^ .......F > [020] 00 00 00 00 00 04 00 01 00 00 00 0A 00 00 00 00 ........ ........ > [030] 00 00 00 0A 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G > [040] 00 52 00 44 00 43 00 32 00 00 00 07 00 00 00 00 .R.D.C.2 ........ > [050] 00 00 00 07 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X > [060] 00 32 00 00 00 88 17 BE E6 A0 15 8F 16 .2...... ..... >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,180) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,180) wrote 180 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 92 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 5E 05 00 02 03 10 00 00 00 24 00 00 00 05 00 00 ^....... .$...... > [010] 00 0C 00 00 00 00 00 00 00 CF 54 1F 9F 8D 4D 14 ........ ..T...M. > [020] 93 00 00 00 00 ..... >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 5E 05 00 02 03 10 00 00 00 24 00 00 00 05 00 00 ^....... .$...... > [010] 00 0C 00 00 00 00 00 00 00 CF 54 1F 9F 8D 4D 14 ........ ..T...M. > [020] 93 00 00 00 00 ..... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0024 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000005 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 0000000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 36, data_len 12, ss_len 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 36 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c returned 24 bytes. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_req_chal >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0000 data: cf 54 1f 9f 8d 4d 14 93 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) > 0008 status: NT_STATUS_OK >[2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(213) > creds_client_init: client chal : 8817BEE6A0158F16 >[2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(214) > creds_client_init: server chal : CF541F9F8D4D1493 >[2006/06/23 12:37:32, 4] libsmb/credentials.c:cred_create_session_key(65) > cred_create_session_key >[2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(67) > clnt_chal_in: 8817BEE6A0158F16 >[2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(68) > srv_chal_in : CF541F9F8D4D1493 >[2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(69) > clnt+srv : 576CDD852D63A3A9 >[2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(70) > sess_key_out : 84C276C5D284E714 >[2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(240) > creds_client_init: clnt : 1203A1161CCE2C3D >[2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(241) > creds_client_init: server : 0BE0B2C6F45471D4 >[2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(242) > creds_client_init: seed : 1203A1161CCE2C3D >[2006/06/23 12:37:32, 4] rpc_client/cli_netlogon.c:rpccli_net_auth2(170) > cli_net_auth2: srv:\\TIGRDC2 acct:IBRIX2$ sc:2 mc: IBRIX2 neg: 400701ff >[2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_auth_2(800) > init_q_auth_2: 800 >[2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_log_info(1411) > make_log_info 1411 >[2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_auth_2(806) > init_q_auth_2: 806 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_auth_2 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_log_info >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 undoc_buffer: 00000001 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 uni_max_len: 0000000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c uni_str_len: 0000000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0010 buffer : \.\.T.I.G.R.D.C.2... >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_unistr2 unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0024 uni_max_len: 00000008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 002c uni_str_len: 00000008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0030 buffer : I.B.R.I.X.2.$... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0040 sec_chan: 0002 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000042 smb_io_unistr2 unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 uni_max_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0048 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c uni_str_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0050 buffer : I.B.R.I.X.2... >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00005e smb_io_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 005e data: 12 03 a1 16 1c ce 2c 3d >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000066 net_io_neg_flags >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0068 neg_flags: 400701ff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0084 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000006 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 0000006c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 000f >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=214 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 132 (0x84) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 132 (0x84) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=32780 (0x800C) > smb_bcc=147 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 84 00 00 00 06 00 00 00 6C ........ .......l > [020] 00 00 00 00 00 0F 00 01 00 00 00 0A 00 00 00 00 ........ ........ > [030] 00 00 00 0A 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G > [040] 00 52 00 44 00 43 00 32 00 00 00 08 00 00 00 00 .R.D.C.2 ........ > [050] 00 00 00 08 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X > [060] 00 32 00 24 00 00 00 02 00 00 00 07 00 00 00 00 .2.$.... ........ > [070] 00 00 00 07 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X > [080] 00 32 00 00 00 12 03 A1 16 1C CE 2C 3D 00 00 FF .2...... ...,=... > [090] 01 07 40 ..@ >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,218) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,218) wrote 218 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 96 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 84 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 ........ .(...... > [010] 00 10 00 00 00 00 00 00 00 0B E0 B2 C6 F4 54 71 ........ ......Tq > [020] D4 FF 01 07 40 00 00 00 00 ....@... . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 84 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 ........ .(...... > [010] 00 10 00 00 00 00 00 00 00 0B E0 B2 C6 F4 54 71 ........ ......Tq > [020] D4 FF 01 07 40 00 00 00 00 ....@... . >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0028 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000006 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 00000010 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 40 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c returned 32 bytes. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_auth_2 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0000 data: 0b e0 b2 c6 f4 54 71 d4 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 net_io_neg_flags >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 neg_flags: 400701ff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) > 000c status: NT_STATUS_OK >[2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_check(259) > creds_client_check: credentials check OK. >[2006/06/23 12:37:32, 5] rpc_client/cli_netlogon.c:rpccli_netlogon_setup_creds(345) > rpccli_netlogon_setup_creds: server TIGRDC2 credential chain established. >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,108) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,108) wrote 108 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 103 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=8 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 3840 (0xF00) > smb_vwv[ 3]= 320 (0x140) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[400f]: \NETLOGON auth_type 2, auth_level 6 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. > [010] 01 00 00 00 .... >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_auth_schannel_neg schannel_neg >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 type1: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 type2: 00000003 >[2006/06/23 12:37:32, 6] lib/util.c:dump_data(2058) > [000] 54 49 47 52 TIGR >[2006/06/23 12:37:32, 6] lib/util.c:dump_data(2058) > [000] 49 42 52 49 58 32 IBRIX2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0064 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0014 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0018 num_contexts: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001c context_id : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 001e num_transfer_syntaxes: 01 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 data : 12345678 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0024 data : 1234 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0026 data : abcd >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0028 data : ef 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 002a data : 01 23 45 67 cf fb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 version: 00000001 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0038 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 003a data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003c data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003e data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_rpc_hdr_auth hdr_auth >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0048 auth_type : 44 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0049 auth_level : 06 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 004a auth_pad_len : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 004b auth_reserved: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c auth_context_id: 00000001 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=182 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=9 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 100 (0x64) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 100 (0x64) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16399 (0x400F) > smb_bcc=115 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 64 00 14 00 07 00 00 00 B8 .......d ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 44 06 00 00 01 00 00 00 00 .H`....D ........ > [060] 00 00 00 03 00 00 00 54 49 47 52 00 49 42 52 49 .......T IGR.IBRI > [070] 58 32 00 X2. >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,186) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,186) wrote 186 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 144 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 88 (0x58) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 88 (0x58) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=89 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 07 00 00 d....... .X...... > [010] 00 B8 10 B8 10 06 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE > [020] 5C 6C 73 61 73 73 00 0A FA 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ > [050] 00 00 00 00 00 00 00 00 00 ........ . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 88 (0x58) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 88 (0x58) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=89 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 07 00 00 d....... .X...... > [010] 00 B8 10 B8 10 06 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE > [020] 5C 6C 73 61 73 73 00 0A FA 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ > [050] 00 00 00 00 00 00 00 00 00 ........ . >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0058 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000007 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 88 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f returned 88 bytes. >[2006/06/23 12:37:32, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f bind request returned ok. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0058 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0012 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 assoc_gid: 0106cb06 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0018 len: 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 001a str: \PIPE\lsass. >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0028 num_results: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 002c result : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 002e reason : 0000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0034 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0036 data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0038 data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 003a data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0040 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2509) > cli_rpc_pipe_open_schannel_with_key: opened pipe \NETLOGON to machine TIGRDC2 for domain TIGR and bound using schannel. >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,45) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,45) wrote 45 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=10 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) > cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2 >[2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(82) > sequence = 0x449c18ce >[2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(84) > seed: 1203A1161CCE2C3D >[2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(89) > seed+seq E01B3D5B1CCE2C3D >[2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(93) > CLIENT CEE7D455198885A3 >[2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(98) > seed+seq+1 E11B3D5B1CCE2C3D >[2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(102) > SERVER 81DBFE5D608FAEE6 >[2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_reseed(179) > cred_reseed: seed E11B3D5B1CCE2C3D >[2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_id_info2(1181) > init_id_info2: 1181 >[2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_logon_id(1590) > make_logon_id: 1590 >[2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_sam_info(1275) > init_sam_info: 1275 >[2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_clnt_info2(1505) > make_clnt_info: 1505 >[2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_clnt_srv(1350) > init_clnt_srv: 1350 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_sam_logon >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_sam_info >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_clnt_info2 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_clnt_srv >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 undoc_buffer : 00000001 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 uni_max_len: 0000000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c uni_str_len: 0000000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0010 buffer : \.\.T.I.G.R.D.C.2... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0024 undoc_buffer2: 00000001 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000028 smb_io_unistr2 unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 uni_max_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 002c offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 uni_str_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0034 buffer : I.B.R.I.X.2... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 ptr_cred: 00000001 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_cred >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0048 data: ce e7 d4 55 19 88 85 a3 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_utime >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0050 time: 449c18ce >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0054 ptr_rtn_cred : 00000001 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000058 smb_io_cred >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000058 smb_io_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0058 data: 00 00 00 00 00 00 00 00 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000060 smb_io_utime >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0060 time: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0064 logon_level : 0002 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000066 smb_io_sam_info logon_info >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0066 switch_value : 0002 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000068 net_io_id_info2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0068 ptr_id_info2: 00000001 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 00006c smb_io_unihdr unihdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 006c uni_str_len: 0008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 006e uni_max_len: 0008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0070 buffer : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0074 param_ctrl: 00000820 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000078 smb_io_logon_id >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0078 low : 0000dead >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 007c high: 0000beef >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000080 smb_io_unihdr unihdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0080 uni_str_len: 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0082 uni_max_len: 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0084 buffer : 00000001 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000088 smb_io_unihdr unihdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0088 uni_str_len: 0018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 008a uni_max_len: 0018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 008c buffer : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0090 lm_chal: a3 72 22 53 95 c3 e2 c7 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000098 smb_io_strhdr hdr_nt_chal_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0098 str_str_len: 0018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 009a str_max_len: 0018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 009c buffer : 00000001 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000a0 smb_io_strhdr hdr_lm_chal_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 00a0 str_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 00a2 str_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00a4 buffer : 00000000 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000a8 smb_io_unistr2 uni_domain_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00a8 uni_max_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00ac offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00b0 uni_str_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 00b4 buffer : T.I.G.R. >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000bc smb_io_unistr2 uni_user_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00bc uni_max_len: 00000006 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c0 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c4 uni_str_len: 00000006 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 00c8 buffer : r.a.j.e.e.v. >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000d4 smb_io_unistr2 uni_wksta_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d4 uni_max_len: 0000000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d8 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00dc uni_str_len: 0000000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 00e0 buffer : \.\.K.R.E.A.P.E.R.-.X.P. >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000f8 smb_io_string2 nt_chal_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00f8 str_max_len: 00000018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00fc offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0100 str_str_len: 00000018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_string2(1064) > 0104 buffer : @.......8z..$.T..|[8.!.. >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 00011c smb_io_string2 - NULL lm_chal_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 011c validation_level: 0003 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0160 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0020 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 0000011e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 opnum : 0002 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000138 smb_io_rpc_hdr_auth hdr_auth >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0138 auth_type : 44 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0139 auth_level : 06 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 013a auth_pad_len : 02 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 013b auth_reserved: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 013c auth_context_id: 00000001 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:add_schannel_auth_footer(1357) > add_schannel_auth_footer: SCHANNEL seq_num=0 >[2006/06/23 12:37:32, 10] rpc_parse/parse_prs.c:schannel_encode(1571) > SCHANNEL: schannel_encode seq_num=0 data_len=288 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000140 smb_io_rpc_auth_schannel_chk >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0140 sig : 77 00 7a 00 ff ff 00 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0148 seq_num: 99 25 e3 f8 a5 bd ce d5 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0150 packet_digest: 44 ac 32 92 31 cb 45 26 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0158 confounder: 68 ba c3 5c 04 d3 cf 7a >[2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=434 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=11 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 352 (0x160) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 352 (0x160) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16399 (0x400F) > smb_bcc=367 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 60 01 20 00 08 00 00 00 1E .......` . ...... > [020] 01 00 00 00 00 02 00 C1 05 37 9E 57 69 5A DD A0 ........ .7.WiZ.. > [030] 63 CB 8E A2 02 69 EA 16 79 F4 9C 11 AE 42 4A 2C c....i.. y....BJ, > [040] 18 57 D6 85 CE EE 75 68 F7 21 B5 05 B0 90 13 CE .W....uh .!...... > [050] 14 B5 1F 3E 8D 5D 31 B5 42 B3 B8 48 03 00 87 A9 ...>.]1. B..H.... > [060] 8F BF 3E 7E 7D 9A FD 08 3E 34 89 3B 2A 52 27 E5 ..>~}... >4.;*R'. > [070] 59 9E 2D 83 90 B4 5F 1D 30 26 98 C8 9A 42 F0 17 Y.-..._. 0&...B.. > [080] 9F CD 2E 04 09 3B CB 44 CB 6A B6 B5 89 51 A9 FA .....;.D .j...Q.. > [090] 9F DA 6E BA C9 4E 06 26 CE 5C 2B BF FB 45 16 5D ..n..N.& .\+..E.] > [0A0] BE DF 51 68 72 A9 DE 06 A6 4F F7 0B 6F 0C 03 D5 ..Qhr... .O..o... > [0B0] E5 60 C3 76 78 28 A1 F4 D3 8E 28 42 3B C1 B9 DC .`.vx(.. ..(B;... > [0C0] 04 08 85 64 43 3F 23 02 64 20 11 A8 77 A4 DF 9C ...dC?#. d ..w... > [0D0] AA C4 E1 A5 43 19 CC 3A 65 E1 5F B6 E1 FF 87 51 ....C..: e._....Q > [0E0] 76 C1 03 2D 15 20 C4 32 43 7D 78 32 DE B6 F9 76 v..-. .2 C}x2...v > [0F0] E5 21 83 7D 31 52 5F 88 81 06 9B 06 9D 61 DD BC .!.}1R_. .....a.. > [100] FE 41 60 C9 FA 93 A6 93 3A 77 80 FC 2C E2 18 0A .A`..... :w..,... > [110] 76 2D 39 C4 0B 3E 0F 15 55 15 0C 87 12 5B 05 61 v-9..>.. U....[.a > [120] B9 11 83 EB FA CF 46 F5 CC 07 4D 6A A7 8A 6C FA ......F. ..Mj..l. > [130] 25 D9 53 FA 13 2E 54 22 6A E0 1A 30 4C 12 BF 91 %.S...T" j..0L... > [140] 35 95 98 ED 5E A5 C9 44 06 02 00 01 00 00 00 77 5...^..D .......w > [150] 00 7A 00 FF FF 00 00 99 25 E3 F8 A5 BD CE D5 44 .z...... %......D > [160] AC 32 92 31 CB 45 26 68 BA C3 5C 04 D3 CF 7A .2.1.E&h ..\...z >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,438) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,438) wrote 438 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 1144 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=1144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 1088 (0x440) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 1088 (0x440) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=1089 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 05 00 02 03 10 00 00 00 40 04 20 00 08 00 00 `....... .@. .... > [010] 00 F8 03 00 00 00 00 00 00 BC A4 E1 29 6E E2 84 ........ ....)n.. > [020] ED A0 5A 0B D6 54 EC 07 70 72 AC 8D 59 2E 08 F1 ..Z..T.. pr..Y... > [030] 84 C4 69 DD 40 B2 23 B2 C2 27 12 52 C3 E0 01 E0 ..i.@.#. .'.R.... > [040] C8 35 9A 52 00 CD F1 ED F7 7D 14 BB 51 53 6A 19 .5.R.... .}..QSj. > [050] 91 F3 3A 7C 52 38 53 4D 03 1B DA FE 95 91 A7 6C ..:|R8SM .......l > [060] E7 38 A5 18 21 7D 17 AE 9D AB 6A 08 1D 2D D9 FD .8..!}.. ..j..-.. > [070] 5B 4E D6 18 09 BE 72 78 20 A6 4A B1 D7 91 FD 07 [N....rx .J..... > [080] 1D 08 1F 85 54 A8 C9 E5 02 43 C9 85 02 57 C6 6B ....T... .C...W.k > [090] C5 C7 FF 3A 43 E4 7E EE B5 C4 E6 A2 8C 43 8B 3F ...:C.~. .....C.? > [0A0] 76 6A AA 10 25 8B C5 FA CE C2 1B 83 39 4F DE CC vj..%... ....9O.. > [0B0] 7A 83 AD FB 56 D2 97 58 3C 07 E8 92 7D FB F9 94 z...V..X <...}... > [0C0] 78 9F 7D FD 7F C4 80 E5 E8 DB B8 30 E0 A1 7F 82 x.}..... ...0.... > [0D0] 1C BF 7E AD 96 AA 59 E2 78 78 F5 1E 3F 93 2A 3B ..~...Y. xx..?.*; > [0E0] E4 6C 9D 25 B7 4B E4 FF 86 17 B5 7D 0B FC BE AF .l.%.K.. ...}.... > [0F0] 79 8D 1E BC 09 2D 6F AB 2B 9F 49 A0 9D 74 19 23 y....-o. +.I..t.# > [100] 3F 45 E5 1D A8 E4 2B 60 A9 DC 91 8C F3 AB 9E E8 ?E....+` ........ > [110] B7 AC C0 70 DE 19 BD 16 CA 17 93 02 3D 85 A6 60 ...p.... ....=..` > [120] FD 44 00 23 3B FB 7C 6D 65 47 2A 6C E8 94 DB 48 .D.#;.|m eG*l...H > [130] 95 72 D3 4D EA 4C 03 D5 3B 58 98 53 B8 E1 E3 B5 .r.M.L.. ;X.S.... > [140] 23 25 1D E3 BD 5F BC 71 8D 30 4A BC 00 11 D7 EE #%..._.q .0J..... > [150] 64 99 53 C1 0F B2 D5 33 0D C6 6C 54 8D FA FB 48 d.S....3 ..lT...H > [160] E1 8F CB FA 69 5D 69 F7 4D 1A A7 96 BD 8B 48 EC ....i]i. M.....H. > [170] 99 91 56 96 A5 69 77 7C 04 D8 F2 0E 48 F9 E5 D3 ..V..iw| ....H... > [180] 98 73 C0 80 41 9F 92 C2 AE 6B 4F B5 50 84 25 52 .s..A... .kO.P.%R > [190] F6 4D E9 57 3F F0 63 8E 90 FA 5A 09 AE 48 47 EC .M.W?.c. ..Z..HG. > [1A0] 2D 54 0F D8 14 26 7A BC F0 E1 C1 D9 5E 86 59 8A -T...&z. ....^.Y. > [1B0] 9F 29 BD 75 E7 98 CE 86 5E 8A CA 03 2F 4D F3 1F .).u.... ^.../M.. > [1C0] 87 FB 98 7C D2 C8 F9 1C DE F6 6E 04 C8 6D 3E 6D ...|.... ..n..m>m > [1D0] C3 0B 2D 30 86 54 5B 66 91 DD 47 48 1C 32 A2 18 ..-0.T[f ..GH.2.. > [1E0] 58 D3 12 4D 1E 51 E1 80 39 01 B2 F3 08 DC 3B 98 X..M.Q.. 9.....;. > [1F0] A1 29 22 A7 F9 05 79 F5 F6 A4 5A DC F5 33 06 D6 .)"...y. ..Z..3.. >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=1144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 1088 (0x440) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 1088 (0x440) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=1089 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 05 00 02 03 10 00 00 00 40 04 20 00 08 00 00 `....... .@. .... > [010] 00 F8 03 00 00 00 00 00 00 BC A4 E1 29 6E E2 84 ........ ....)n.. > [020] ED A0 5A 0B D6 54 EC 07 70 72 AC 8D 59 2E 08 F1 ..Z..T.. pr..Y... > [030] 84 C4 69 DD 40 B2 23 B2 C2 27 12 52 C3 E0 01 E0 ..i.@.#. .'.R.... > [040] C8 35 9A 52 00 CD F1 ED F7 7D 14 BB 51 53 6A 19 .5.R.... .}..QSj. > [050] 91 F3 3A 7C 52 38 53 4D 03 1B DA FE 95 91 A7 6C ..:|R8SM .......l > [060] E7 38 A5 18 21 7D 17 AE 9D AB 6A 08 1D 2D D9 FD .8..!}.. ..j..-.. > [070] 5B 4E D6 18 09 BE 72 78 20 A6 4A B1 D7 91 FD 07 [N....rx .J..... > [080] 1D 08 1F 85 54 A8 C9 E5 02 43 C9 85 02 57 C6 6B ....T... .C...W.k > [090] C5 C7 FF 3A 43 E4 7E EE B5 C4 E6 A2 8C 43 8B 3F ...:C.~. .....C.? > [0A0] 76 6A AA 10 25 8B C5 FA CE C2 1B 83 39 4F DE CC vj..%... ....9O.. > [0B0] 7A 83 AD FB 56 D2 97 58 3C 07 E8 92 7D FB F9 94 z...V..X <...}... > [0C0] 78 9F 7D FD 7F C4 80 E5 E8 DB B8 30 E0 A1 7F 82 x.}..... ...0.... > [0D0] 1C BF 7E AD 96 AA 59 E2 78 78 F5 1E 3F 93 2A 3B ..~...Y. xx..?.*; > [0E0] E4 6C 9D 25 B7 4B E4 FF 86 17 B5 7D 0B FC BE AF .l.%.K.. ...}.... > [0F0] 79 8D 1E BC 09 2D 6F AB 2B 9F 49 A0 9D 74 19 23 y....-o. +.I..t.# > [100] 3F 45 E5 1D A8 E4 2B 60 A9 DC 91 8C F3 AB 9E E8 ?E....+` ........ > [110] B7 AC C0 70 DE 19 BD 16 CA 17 93 02 3D 85 A6 60 ...p.... ....=..` > [120] FD 44 00 23 3B FB 7C 6D 65 47 2A 6C E8 94 DB 48 .D.#;.|m eG*l...H > [130] 95 72 D3 4D EA 4C 03 D5 3B 58 98 53 B8 E1 E3 B5 .r.M.L.. ;X.S.... > [140] 23 25 1D E3 BD 5F BC 71 8D 30 4A BC 00 11 D7 EE #%..._.q .0J..... > [150] 64 99 53 C1 0F B2 D5 33 0D C6 6C 54 8D FA FB 48 d.S....3 ..lT...H > [160] E1 8F CB FA 69 5D 69 F7 4D 1A A7 96 BD 8B 48 EC ....i]i. M.....H. > [170] 99 91 56 96 A5 69 77 7C 04 D8 F2 0E 48 F9 E5 D3 ..V..iw| ....H... > [180] 98 73 C0 80 41 9F 92 C2 AE 6B 4F B5 50 84 25 52 .s..A... .kO.P.%R > [190] F6 4D E9 57 3F F0 63 8E 90 FA 5A 09 AE 48 47 EC .M.W?.c. ..Z..HG. > [1A0] 2D 54 0F D8 14 26 7A BC F0 E1 C1 D9 5E 86 59 8A -T...&z. ....^.Y. > [1B0] 9F 29 BD 75 E7 98 CE 86 5E 8A CA 03 2F 4D F3 1F .).u.... ^.../M.. > [1C0] 87 FB 98 7C D2 C8 F9 1C DE F6 6E 04 C8 6D 3E 6D ...|.... ..n..m>m > [1D0] C3 0B 2D 30 86 54 5B 66 91 DD 47 48 1C 32 A2 18 ..-0.T[f ..GH.2.. > [1E0] 58 D3 12 4D 1E 51 E1 80 39 01 B2 F3 08 DC 3B 98 X..M.Q.. 9.....;. > [1F0] A1 29 22 A7 F9 05 79 F5 F6 A4 5A DC F5 33 06 D6 .)"...y. ..Z..3.. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0440 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0020 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 000003f8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000418 smb_io_rpc_hdr_auth hdr_auth >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0418 auth_type : 44 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0419 auth_level : 06 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 041a auth_pad_len : 08 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 041b auth_reserved: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 041c auth_context_id: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000420 smb_io_rpc_auth_schannel_chk >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0420 sig : 77 00 7a 00 ff ff 00 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0428 seq_num: b0 14 e8 8a 5e b2 93 8f >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0430 packet_digest: a9 50 19 35 0e 04 af db >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0438 confounder: fa e2 bd 39 ae 88 25 0f >[2006/06/23 12:37:32, 10] rpc_parse/parse_prs.c:schannel_decode(1648) > SCHANNEL: schannel_decode seq_num=1 data_len=1024 >[2006/06/23 12:37:32, 10] rpc_parse/parse_prs.c:schannel_decode(1668) > SCHANNEL: schannel_decode seq_num=1 data_len=1024 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 1088, data_len 1016, ss_len 8 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 1088 at offset 0 >[2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f returned 2032 bytes. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_sam_logon >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 buffer_creds: 00020000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_cred >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_chal >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0004 data: 81 db fe 5d 60 8f ae e6 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00000c smb_io_utime >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c time: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0010 switch_value: 0003 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000014 net_io_user_info3 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 ptr_user_info : 00020004 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_time logon time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 low : d2ca8713 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 001c high: 01c696dc >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_time logoff time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 low : ffffffff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0024 high: 7fffffff >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000028 smb_io_time kickoff time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 low : ffffffff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 002c high: 7fffffff >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_time last set time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 low : 09fac924 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 high: 01c6868d >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_time can change time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0038 low : 09fac924 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 003c high: 01c6868d >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000040 smb_io_time must change time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0040 low : ffffffff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 high: 7fffffff >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_unihdr hdr_user_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0048 uni_str_len: 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 004a uni_max_len: 000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c buffer : 00020008 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_unihdr hdr_full_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0050 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0052 uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0054 buffer : 00000000 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000058 smb_io_unihdr hdr_logon_script >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0058 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 005a uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 005c buffer : 00000000 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000060 smb_io_unihdr hdr_profile_path >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0060 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0062 uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0064 buffer : 00000000 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000068 smb_io_unihdr hdr_home_dir >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0068 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 006a uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 006c buffer : 00000000 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000070 smb_io_unihdr hdr_dir_drive >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0070 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0072 uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0074 buffer : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0078 logon_count : 08c3 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 007a bad_pw_count : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 007c user_rid : 00000c2a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0080 group_rid : 00000201 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0084 num_groups : 0000000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0088 buffer_groups : 0002000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 008c user_flgs : 00000120 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0090 user_sess_key: e9 44 1c 27 6e ca 64 de 42 a9 99 90 b6 05 cb 5c >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000a0 smb_io_unihdr hdr_logon_srv >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 00a0 uni_str_len: 000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 00a2 uni_max_len: 0010 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00a4 buffer : 00020010 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000a8 smb_io_unihdr hdr_logon_dom >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 00a8 uni_str_len: 0008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 00aa uni_max_len: 000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00ac buffer : 00020014 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00b0 buffer_dom_id : 00020018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 00b4 lm_sess_key: e7 74 f4 48 61 9d 04 3b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00bc acct_flags : 00000210 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c0 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c4 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c8 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00cc unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d0 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d4 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d8 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00dc num_other_sids: 0000000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00e0 buffer_other_sids: 0002001c >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000e4 smb_io_unistr2 uni_user_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00e4 uni_max_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00e8 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00ec uni_str_len: 00000006 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 00f0 buffer : r.a.j.e.e.v. >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_full_name >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_logon_script >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_profile_path >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_home_dir >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_dir_drive >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00fc num_groups2 : 0000000e >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000100 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0100 g_rid: 0000128a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0104 attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000108 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0108 g_rid: 0000053c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 010c attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000110 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0110 g_rid: 00001bdb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0114 attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000118 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0118 g_rid: 00000d53 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 011c attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000120 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0120 g_rid: 00000fa7 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0124 attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000128 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0128 g_rid: 00000fa8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 012c attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000130 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0130 g_rid: 0000169a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0134 attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000138 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0138 g_rid: 0000055e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 013c attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000140 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0140 g_rid: 00000555 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0144 attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000148 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0148 g_rid: 00000540 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 014c attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000150 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0150 g_rid: 00000fdd >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0154 attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000158 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0158 g_rid: 00000201 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 015c attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000160 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0160 g_rid: 0000055c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0164 attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000168 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0168 g_rid: 0000051b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 016c attr : 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000170 smb_io_unistr2 uni_logon_srv >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0170 uni_max_len: 00000008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0174 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0178 uni_str_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 017c buffer : T.I.G.R.D.C.2. >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00018a smb_io_unistr2 uni_logon_dom >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 018c uni_max_len: 00000005 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0190 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0194 uni_str_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0198 buffer : T.I.G.R. >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0001a0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01a0 num_auths: 00000004 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0001a4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01a4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01a5 num_auths : 04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01a6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01a7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01a8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01a9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01aa id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 01ab id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 01ac sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01bc num_other_sids: 0000000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01c0 sid_ptr: 00020020 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01c4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01c8 sid_ptr: 00020024 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01cc attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01d0 sid_ptr: 00020028 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01d4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01d8 sid_ptr: 0002002c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01dc attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01e0 sid_ptr: 00020030 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01e4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01e8 sid_ptr: 00020034 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01ec attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01f0 sid_ptr: 00020038 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01f4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01f8 sid_ptr: 0002003c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01fc attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0200 sid_ptr: 00020040 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0204 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0208 sid_ptr: 00020044 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 020c attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0210 sid_ptr: 00020048 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0214 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0218 sid_ptr: 0002004c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 021c attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0220 sid_ptr: 00020050 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0224 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0228 sid_ptr: 00020054 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 022c attribute: 00000007 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000230 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0230 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000234 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0234 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0235 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0236 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0237 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0238 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0239 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 023a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 023b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 023c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000250 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0250 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000254 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0254 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0255 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0256 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0257 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0258 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0259 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 025a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 025b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 025c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000270 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0270 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000274 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0274 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0275 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0276 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0277 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0278 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0279 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 027a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 027b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 027c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000290 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0290 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000294 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0294 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0295 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0296 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0297 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0298 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0299 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 029a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 029b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 029c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002b0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 02b0 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0002b4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02b4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02b5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02b6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02b7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02b8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02b9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02ba id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02bb id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 02bc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002d0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 02d0 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0002d4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02d4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02d5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02d6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02d7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02d8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02d9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02da id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02db id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 02dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 02f0 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0002f4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02f4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02f5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02f6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02f7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02f8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02f9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02fa id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02fb id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 02fc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000310 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0310 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000314 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0314 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0315 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0316 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0317 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0318 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0319 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 031a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 031b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 031c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000330 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0330 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000334 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0334 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0335 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0336 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0337 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0338 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0339 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 033a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 033b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 033c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000350 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0350 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000354 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0354 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0355 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0356 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0357 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0358 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0359 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 035a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 035b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 035c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000370 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0370 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000374 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0374 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0375 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0376 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0377 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0378 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0379 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 037a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 037b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 037c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000390 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0390 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000394 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0394 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0395 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0396 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0397 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0398 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0399 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 039a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 039b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 039c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003b0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 03b0 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0003b4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03b4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03b5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03b6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03b7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03b8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03b9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03ba id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03bb id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 03bc sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003d0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 03d0 num_auths: 00000005 >[2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0003d4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03d4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03d5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03d6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03d7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03d8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03d9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03da id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03db id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 03dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 03f0 auth_resp : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) > 03f4 status : NT_STATUS_OK >[2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_check(259) > creds_client_check: credentials check OK. >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for TIGRDC2 >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) > Finding user TIGR\rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) > Trying _Get_Pwnam(), username as lowercase is tigr\rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(242) > Trying _Get_Pwnam(), username as given is TIGR\rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(252) > Trying _Get_Pwnam(), username as uppercase is TIGR\RAJEEV >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(261) > Checking combinations of 0 uppercase letters in tigr\rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) > Get_Pwnam_internals didn't find user [TIGR\rajeev]! >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) > Finding user rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) > Trying _Get_Pwnam(), username as lowercase is rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) > Get_Pwnam_internals did find user [rajeev]! >[2006/06/23 12:37:32, 5] auth/auth_util.c:fill_sam_account(1118) > fill_sam_account: located username was [rajeev] >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_username(617) > pdb_set_username: setting username rajeev, was >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) > pdb_set_full_name: setting full name Rajeev Karamchedu, was >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833) > pdb_set_unix_homedir: setting home dir /home/rajeev, was NULL >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_domain(644) > pdb_set_domain: setting domain IBRIX2, was >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) > pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036 >[2006/06/23 12:37:32, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036 from rid 4036 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) > pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081 >[2006/06/23 12:37:32, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) > pdb_set_group_sid_from_rid: > setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081 from rid 1081 >[2006/06/23 12:37:32, 4] lib/substitute.c:automount_server(359) > Home server: ibrix2 >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) > pdb_set_profile_path: setting profile path \\ibrix2\rajeev\profile, was >[2006/06/23 12:37:32, 4] lib/substitute.c:automount_server(359) > Home server: ibrix2 >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) > pdb_set_homedir: setting home dir \\ibrix2\rajeev, was >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) > pdb_set_dir_drive: setting dir drive , was NULL >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) > pdb_set_logon_script: setting logon script , was >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) > pdb_set_nt_username: setting nt username rajeev, was >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_username(617) > pdb_set_username: setting username rajeev, was rajeev >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_domain(644) > pdb_set_domain: setting domain TIGR, was IBRIX2 >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) > pdb_set_user_sid: setting user sid S-1-5-21-2867130070-3872911017-3508780997-3114 >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) > pdb_set_group_sid: setting group sid S-1-5-21-2867130070-3872911017-3508780997-513 >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) > pdb_set_full_name: setting full name , was Rajeev Karamchedu >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) > pdb_set_logon_script: setting logon script , was >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) > pdb_set_profile_path: setting profile path , was \\ibrix2\rajeev\profile >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) > pdb_set_homedir: setting home dir , was \\ibrix2\rajeev >[2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) > pdb_set_dir_drive: setting dir drive , was >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 10] lib/system_smbd.c:sys_getgrouplist(167) > sys_getgrouplist: user [rajeev] >[2006/06/23 12:37:32, 10] lib/system_smbd.c:sys_getgrouplist(176) > sys_getgrouplist(): disabled winbindd for group lookup [user == rajeev] >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 8] lib/system_smbd.c:remove_duplicate_gids(49) > remove_duplicate_gids: Enter 14 gids >[2006/06/23 12:37:32, 8] lib/system_smbd.c:remove_duplicate_gids(67) > remove_duplicate_gids: Exit 13 gids >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081 >[2006/06/23 12:37:32, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267) > fetch sid from gid cache 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) > local_gid_to_sid: Fall back to algorithmic mapping: 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051 >[2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) > gid_to_sid: local 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 10] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 > contains 45 SIDs > SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 > SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 > SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 > SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 > SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 > SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 > SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 > SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 > SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 > SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 > SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 > SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 > SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 > SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 > SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 > SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 > SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 > SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 > SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 > SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 > SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 > SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 > SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 > SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 > SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 > SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 > SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 > SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 > SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 > SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 > SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 > SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 > SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 > SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 > SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 > SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 > SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 > SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 > SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 > SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:37:32, 10] libsmb/samlogon_cache.c:netsamlogon_cache_store(134) > netsamlogon_cache_store: SID [S-1-5-21-2867130070-3872911017-3508780997-3114] >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 timestamp: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000004 net_io_user_info3 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 ptr_user_info : 00020004 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 smb_io_time logon time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 low : d2ca8713 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c high: 01c696dc >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_time logoff time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 low : ffffffff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 high: 7fffffff >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_time kickoff time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 low : ffffffff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 001c high: 7fffffff >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_time last set time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 low : 09fac924 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0024 high: 01c6868d >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000028 smb_io_time can change time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 low : 09fac924 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 002c high: 01c6868d >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_time must change time >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 low : ffffffff >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 high: 7fffffff >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_unihdr hdr_user_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0038 uni_str_len: 000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 003a uni_max_len: 000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 003c buffer : 00020008 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000040 smb_io_unihdr hdr_full_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0040 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0042 uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0044 buffer : 00000000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_unihdr hdr_logon_script >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0048 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 004a uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 004c buffer : 00000000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_unihdr hdr_profile_path >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0050 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0052 uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0054 buffer : 00000000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000058 smb_io_unihdr hdr_home_dir >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0058 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 005a uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 005c buffer : 00000000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000060 smb_io_unihdr hdr_dir_drive >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0060 uni_str_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0062 uni_max_len: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0064 buffer : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0068 logon_count : 08c3 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 006a bad_pw_count : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 006c user_rid : 00000c2a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0070 group_rid : 00000201 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0074 num_groups : 0000000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0078 buffer_groups : 0002000c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 007c user_flgs : 00000120 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0080 user_sess_key: 44 1e ea fc 4e 56 5c 63 cb e2 35 70 2d 85 ad e6 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000090 smb_io_unihdr hdr_logon_srv >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0090 uni_str_len: 000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0092 uni_max_len: 0010 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0094 buffer : 00020010 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000098 smb_io_unihdr hdr_logon_dom >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0098 uni_str_len: 0008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 009a uni_max_len: 000a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 009c buffer : 00020014 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00a0 buffer_dom_id : 00020018 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 00a4 lm_sess_key: 4a 2e 02 93 41 01 3c 86 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00ac acct_flags : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00b0 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00b4 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00b8 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00bc unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c0 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c4 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00c8 unkown: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00cc num_other_sids: 0000000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d0 buffer_other_sids: 0002001c >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000d4 smb_io_unistr2 uni_user_name >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d4 uni_max_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00d8 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00dc uni_str_len: 00000006 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 00e0 buffer : r.a.j.e.e.v. >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_full_name >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_logon_script >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_profile_path >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_home_dir >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_dir_drive >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00ec num_groups2 : 0000000e >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000f0 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00f0 g_rid: 0000128a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00f4 attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000f8 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00f8 g_rid: 0000053c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 00fc attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000100 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0100 g_rid: 00001bdb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0104 attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000108 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0108 g_rid: 00000d53 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 010c attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000110 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0110 g_rid: 00000fa7 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0114 attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000118 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0118 g_rid: 00000fa8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 011c attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000120 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0120 g_rid: 0000169a >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0124 attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000128 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0128 g_rid: 0000055e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 012c attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000130 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0130 g_rid: 00000555 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0134 attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000138 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0138 g_rid: 00000540 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 013c attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000140 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0140 g_rid: 00000fdd >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0144 attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000148 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0148 g_rid: 00000201 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 014c attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000150 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0150 g_rid: 0000055c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0154 attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000158 smb_io_gid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0158 g_rid: 0000051b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 015c attr : 00000007 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000160 smb_io_unistr2 uni_logon_srv >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0160 uni_max_len: 00000008 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0164 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0168 uni_str_len: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 016c buffer : T.I.G.R.D.C.2. >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00017a smb_io_unistr2 uni_logon_dom >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 017c uni_max_len: 00000005 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0180 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0184 uni_str_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0188 buffer : T.I.G.R. >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000190 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0190 num_auths: 00000004 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000194 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0194 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0195 num_auths : 04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0196 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0197 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0198 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0199 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 019a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 019b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 019c sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01ac num_other_sids: 0000000e >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01b0 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01b4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01b8 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01bc attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01c0 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01c4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01c8 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01cc attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01d0 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01d4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01d8 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01dc attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01e0 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01e4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01e8 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01ec attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01f0 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01f4 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01f8 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 01fc attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0200 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0204 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0208 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 020c attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0210 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0214 attribute: 00000007 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0218 sid_ptr: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 021c attribute: 00000007 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000220 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0220 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000224 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0224 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0225 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0226 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0227 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0228 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0229 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 022a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 022b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 022c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000240 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0240 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000244 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0244 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0245 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0246 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0247 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0248 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0249 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 024a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 024b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 024c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000260 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0260 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000264 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0264 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0265 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0266 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0267 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0268 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0269 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 026a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 026b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 026c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000280 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0280 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000284 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0284 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0285 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0286 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0287 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0288 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0289 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 028a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 028b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 028c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0002a0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 02a0 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002a4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02a4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02a5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02a6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02a7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02a8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02a9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02aa id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02ab id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 02ac sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0002c0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 02c0 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002c4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02c4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02c5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02c6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02c7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02c8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02c9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02ca id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02cb id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 02cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0002e0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 02e0 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002e4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02e4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02e5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02e6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02e7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02e8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02e9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02ea id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 02eb id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 02ec sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000300 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0300 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000304 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0304 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0305 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0306 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0307 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0308 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0309 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 030a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 030b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 030c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000320 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0320 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000324 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0324 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0325 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0326 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0327 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0328 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0329 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 032a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 032b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 032c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000340 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0340 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000344 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0344 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0345 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0346 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0347 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0348 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0349 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 034a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 034b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 034c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000360 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0360 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000364 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0364 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0365 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0366 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0367 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0368 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0369 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 036a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 036b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 036c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000380 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0380 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000384 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0384 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0385 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0386 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0387 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0388 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0389 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 038a id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 038b id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 038c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0003a0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 03a0 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003a4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03a4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03a5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03a6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03a7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03a8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03a9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03aa id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03ab id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 03ac sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0003c0 smb_io_dom_sid2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 03c0 num_auths: 00000005 >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003c4 smb_io_dom_sid sid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03c4 sid_rev_num: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03c5 num_auths : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03c6 id_auth[0] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03c7 id_auth[1] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03c8 id_auth[2] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03c9 id_auth[3] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03ca id_auth[4] : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 03cb id_auth[5] : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) > 03cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,45) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,45) wrote 45 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=12 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) > cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2 >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,39) >[2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,39) wrote 39 >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 35 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=55297 > smb_tid=45058 > smb_pid=23622 > smb_uid=12291 > smb_mid=13 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 3] auth/auth.c:check_ntlm_password(268) > check_ntlm_password: winbind authentication for user [rajeev] succeeded >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth.c:check_ntlm_password(294) > check_ntlm_password: PAM Account for user [rajeev] succeeded >[2006/06/23 12:37:32, 2] auth/auth.c:check_ntlm_password(307) > check_ntlm_password: authentication for user [rajeev] -> [rajeev] -> [rajeev] succeeded >[2006/06/23 12:37:32, 5] auth/auth_util.c:free_user_info(1485) > attempting to free (and zero) a user_info structure >[2006/06/23 12:37:32, 10] auth/auth_util.c:free_user_info(1488) > structure was created for rajeev >[2006/06/23 12:37:32, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(120) > Got NT session key of length 16 >[2006/06/23 12:37:32, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(127) > Got LM session key of length 8 >[2006/06/23 12:37:32, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(728) > ntlmssp_server_auth: Created NTLM2 session key. >[2006/06/23 12:37:32, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) > NTLMSSP Sign/Seal - Initialising with flags: >[2006/06/23 12:37:32, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) > Got NTLMSSP neg_flags=0x60088235 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_SEAL > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_NTLM2 > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 115 >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(255) > register_vuid: (1518,40) rajeev rajeev TIGR guest=0 >[2006/06/23 12:37:32, 3] smbd/password.c:register_vuid(257) > User name: rajeev Real name: >[2006/06/23 12:37:32, 3] smbd/password.c:register_vuid(276) > UNIX uid 1518 is UNIX user rajeev, and will be vuid 115 >[2006/06/23 12:37:32, 7] param/loadparm.c:lp_servicenumber(4343) > lp_servicenumber: couldn't find rajeev >[2006/06/23 12:37:32, 3] smbd/password.c:register_vuid(305) > Adding homes service for user 'rajeev' using home directory: '/home/rajeev' >[2006/06/23 12:37:32, 7] param/loadparm.c:lp_servicenumber(4343) > lp_servicenumber: couldn't find homes >[2006/06/23 12:37:32, 6] param/loadparm.c:lp_file_list_changed(2947) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 > >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=98 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=115 > smb_mid=6720 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 9 (0x9) > smb_bcc=55 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x > [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 > [020] 00 2E 00 30 00 2E 00 32 00 32 00 00 00 54 00 49 ...0...2 .2...T.I > [030] 00 47 00 52 00 00 00 .G.R... >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 76 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x4c >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 17 of length 80 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=76 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=115 > smb_mid=6784 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 76 (0x4C) > smb_vwv[ 2]= 8 (0x8) > smb_vwv[ 3]= 1 (0x1) > smb_bcc=33 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 5C 00 49 00 42 00 52 00 49 00 58 00 32 .\.\.I.B .R.I.X.2 > [010] 00 5C 00 44 00 46 00 53 00 00 00 3F 3F 3F 3F 3F .\.D.F.S ...????? > [020] 00 . >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtconX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 4] smbd/reply.c:reply_tcon_and_X(660) > Client requested device type [?????] for share [DFS] >[2006/06/23 12:37:32, 5] smbd/service.c:make_connection(860) > making a connection to 'normal' service dfs >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) > Finding user rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) > Trying _Get_Pwnam(), username as lowercase is rajeev >[2006/06/23 12:37:32, 10] lib/util_pw.c:getpwnam_alloc(98) > Got rajeev from pwnam_cache >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) > Get_Pwnam_internals did find user [rajeev]! >[2006/06/23 12:37:32, 3] smbd/service.c:make_connection_snum(488) > Connect path is '/export/dfsroot' for service [dfs] >[2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) > get_share_security: using default secdesc for dfs >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 >[2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (2) granted. >[2006/06/23 12:37:32, 3] smbd/vfs.c:vfs_init_default(216) > Initialising default vfs hooks >[2006/06/23 12:37:32, 5] smbd/connection.c:claim_connection(170) > claiming dfs 0 >[2006/06/23 12:37:32, 10] smbd/uid.c:is_share_read_only_for_user(127) > is_share_read_only_for_user: share dfs is read-only for unix user rajeev >[2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) > get_share_security: using default secdesc for dfs >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 >[2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (1) granted. >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 > contains 45 SIDs > SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 > SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 > SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 > SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 > SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 > SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 > SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 > SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 > SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 > SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 > SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 > SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 > SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 > SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 > SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 > SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 > SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 > SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 > SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 > SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 > SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 > SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 > SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 > SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 > SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 > SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 > SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 > SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 > SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 > SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 > SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 > SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 > SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 > SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 > SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 > SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 > SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 > SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 > SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 > SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/06/23 12:37:32, 1] smbd/service.c:make_connection_snum(693) > kreaper-xp (172.17.134.118) connect to service dfs initially as user rajeev (uid=1518, gid=40) (pid 23622) >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 2] smbd/reply.c:reply_tcon_and_X(703) > Serving dfs as a Dfs root >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_tcon_and_X(708) > tconX service=DFS >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=54 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=6784 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 3 (0x3) > smb_bcc=13 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 102 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x66 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 18 of length 106 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=102 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=6848 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 4096 (0x1000) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=32768 (0x8000) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8256 (0x2040) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=19 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h > [010] 00 00 00 ... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 > contains 45 SIDs > SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 > SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 > SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 > SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 > SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 > SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 > SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 > SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 > SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 > SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 > SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 > SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 > SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 > SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 > SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 > SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 > SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 > SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 > SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 > SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 > SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 > SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 > SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 > SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 > SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 > SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 > SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 > SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 > SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 > SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 > SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 > SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 > SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 > SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 > SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 > SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 > SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 > SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 > SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 > SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/06/23 12:37:32, 4] smbd/vfs.c:vfs_ChDir(738) > vfs_ChDir to /export/dfsroot >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "scratch" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [SCRATCH] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = scratch, dirpath = , start = scratch >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af1d350:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af1d350:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) > conversion finished scratch -> scratch >[2006/06/23 12:37:32, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(scratch) returning 0744 >[2006/06/23 12:37:32, 10] smbd/open.c:open_file_ntcreate(1091) > open_file_ntcreate: fname=scratch, dos_attrs=0x0 access_mask=0x80 share_access=0x7 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0 >[2006/06/23 12:37:32, 5] smbd/open.c:open_file_ntcreate(1178) > open_file_ntcreate: FILE_OPEN requested for file scratch and file doesn't exist. >[2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) > set_bad_path_error: err = 2 bad_path = 0 >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=6848 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 1438 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x59e >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 19 of length 1442 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=1438 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=6912 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 1438 (0x59E) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1276 (0x4FC) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=1379 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ > [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ > [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... > [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... > [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. > [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. > [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. > [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. > [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. > [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p > [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., > [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ > [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L > [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. > [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... > [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. > [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... > [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... > [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< > [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. > [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL > [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. > [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 116 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1210 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=116 > smb_mid=6912 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 78 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x4e >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 20 of length 82 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=78 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=115 > smb_mid=6976 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 78 (0x4E) > smb_vwv[ 2]= 8 (0x8) > smb_vwv[ 3]= 1 (0x1) > smb_bcc=35 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 5C 00 49 00 42 00 52 00 49 00 58 00 32 .\.\.I.B .R.I.X.2 > [010] 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F .\.I.P.C .$...??? > [020] 3F 3F 00 ??. >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtconX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 4] smbd/reply.c:reply_tcon_and_X(660) > Client requested device type [?????] for share [IPC$] >[2006/06/23 12:37:32, 5] smbd/service.c:make_connection(860) > making a connection to 'normal' service ipc$ >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) > Finding user rajeev >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) > Trying _Get_Pwnam(), username as lowercase is rajeev >[2006/06/23 12:37:32, 10] lib/util_pw.c:getpwnam_alloc(98) > Got rajeev from pwnam_cache >[2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) > Get_Pwnam_internals did find user [rajeev]! >[2006/06/23 12:37:32, 3] smbd/service.c:make_connection_snum(488) > Connect path is '/tmp' for service [IPC$] >[2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) > get_share_security: using default secdesc for IPC$ >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 >[2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (2) granted. >[2006/06/23 12:37:32, 3] smbd/vfs.c:vfs_init_default(216) > Initialising default vfs hooks >[2006/06/23 12:37:32, 5] smbd/connection.c:claim_connection(170) > claiming IPC$ 0 >[2006/06/23 12:37:32, 10] smbd/uid.c:is_share_read_only_for_user(127) > is_share_read_only_for_user: share IPC$ is read-only for unix user rajeev >[2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) > get_share_security: using default secdesc for IPC$ >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) >[2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 > se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 > se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 > se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 > se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 >[2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (1) granted. >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 > contains 45 SIDs > SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 > SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 > SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 > SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 > SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 > SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 > SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 > SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 > SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 > SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 > SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 > SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 > SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 > SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 > SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 > SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 > SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 > SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 > SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 > SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 > SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 > SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 > SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 > SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 > SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 > SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 > SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 > SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 > SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 > SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 > SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 > SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 > SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 > SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 > SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 > SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 > SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 > SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 > SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 > SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/06/23 12:37:32, 3] smbd/service.c:make_connection_snum(693) > kreaper-xp (172.17.134.118) connect to service IPC$ initially as user rajeev (uid=1518, gid=40) (pid 23622) >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_tcon_and_X(708) > tconX service=IPC$ >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=2 > smb_pid=65279 > smb_uid=115 > smb_mid=6976 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 100 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x64 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 21 of length 104 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=748 > smb_uid=115 > smb_mid=7040 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]=16384 (0x4000) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. > [010] 00 . >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af5b3b0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 > contains 45 SIDs > SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 > SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 > SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 > SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 > SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 > SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 > SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 > SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 > SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 > SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 > SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 > SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 > SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 > SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 > SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 > SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 > SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 > SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 > SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 > SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 > SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 > SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 > SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 > SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 > SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 > SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 > SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 > SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 > SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 > SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 > SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 > SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 > SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 > SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 > SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 > SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 > SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 > SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 > SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 > SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/06/23 12:37:32, 4] smbd/vfs.c:vfs_ChDir(738) > vfs_ChDir to /tmp >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 4] smbd/nttrans.c:nt_open_pipe(330) > nt_open_pipe: Opening pipe \srvsvc. >[2006/06/23 12:37:32, 3] smbd/nttrans.c:nt_open_pipe(351) > nt_open_pipe: Known pipe srvsvc opening. >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(180) > Open pipe requested srvsvc (pipes_open=0) >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(285) > Create pipe requested srvsvc >[2006/06/23 12:37:32, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) > init_pipe_handles: created handle list for pipe srvsvc >[2006/06/23 12:37:32, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) > init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(363) > Created internal pipe srvsvc (pipes_open=0) >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) > Opened pipe srvsvc with handle 748a (pipes_open=1) >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(269) > open pipes: name srvsvc pnum=748a >[2006/06/23 12:37:32, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) > do_ntcreate_pipe_open: open pipe = \srvsvc >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=2 > smb_pid=748 > smb_uid=115 > smb_mid=7040 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=35328 (0x8A00) > smb_vwv[ 3]= 372 (0x174) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 136 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x88 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 22 of length 140 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=115 > smb_mid=7104 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=29834 (0x748A) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. > [030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ > [040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBwriteX (pid 23622) conn 0x552af5b3b0 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) > search for pipe pnum=748a >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) > pipe name srvsvc pnum=748a (pipes_open=1) >[2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) > write_to_pipe: 748a name: srvsvc open: Yes len: 72 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) > write_to_pipe: data_left = 72 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) > process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) > write_to_pipe: data_used = 16 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) > write_to_pipe: data_left = 56 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) > process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0b >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0048 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) > unmarshall_rpc_header: using little-endian RPC >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) > unmarshall_rpc_header: type = 11, flags = 3 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) > write_to_pipe: data_used = 0 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) > write_to_pipe: data_left = 56 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) > process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) > process_complete_pdu: processing packet type 11 >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1495) > api_pipe_bind_req: decode request. 1495 >[2006/06/23 12:37:32, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1506) > api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr_rb >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0000 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0002 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 assoc_gid: 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0008 num_contexts: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000c context_id : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 000e num_transfer_syntaxes: 01 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00000f smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 data : 4b324fc8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 data : 1670 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0016 data : 01d3 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0018 data : 12 78 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 001a data : 5a 47 bf 6e e1 88 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 version: 00000003 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0024 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0028 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 002a data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 002c data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 002e data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0034 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1548) > api_pipe_bind_req: make response. 1548 >[2006/06/23 12:37:32, 3] rpc_server/srv_pipe.c:check_bind_req(959) > check_bind_req for \PIPE\srvsvc >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) > checking \PIPE\lsarpc >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) > checking \PIPE\lsarpc >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) > checking \PIPE\samr >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) > checking \PIPE\NETLOGON >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) > checking \PIPE\srvsvc >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr_ba >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr_bba >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0000 max_tsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0002 max_rsize: 10b8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 assoc_gid: 000053f0 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 smb_io_rpc_addr_str >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 len: 000d >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 000a str: \PIPE\ntsvcs. >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000017 smb_io_rpc_results >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0018 num_results: 01 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001c result : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 001e reason : 0000 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_rpc_iface >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0020 data : 8a885d04 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0024 data : 1ceb >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0026 data : 11c9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 0028 data : 9f e8 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) > 002a data : 08 00 2b 10 48 60 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 version: 00000002 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 0c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0044 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) > write_to_pipe: data_used = 56 >[2006/06/23 12:37:32, 3] smbd/pipes.c:reply_pipe_write_and_X(207) > writeX-IPC pnum=748a nwritten=72 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=47 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=2 > smb_pid=65279 > smb_uid=115 > smb_mid=7104 > smt_wct=6 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 72 (0x48) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 59 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x3b >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 23 of length 63 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=115 > smb_mid=7168 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=29834 (0x748A) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBreadX (pid 23622) conn 0x552af5b3b0 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) > search for pipe pnum=748a >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) > pipe name srvsvc pnum=748a (pipes_open=1) >[2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) > read_from_pipe: 748a name: srvsvc len: 1024 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1051) > read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2006/06/23 12:37:32, 3] smbd/pipes.c:reply_pipe_read_and_X(252) > readX-IPC pnum=748a min=1024 max=1024 nread=68 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=127 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=2 > smb_pid=65279 > smb_uid=115 > smb_mid=7168 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 68 (0x44) > smb_vwv[ 6]= 59 (0x3B) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=68 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 00 ........ D....... > [010] B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 5C .....S.. ..\PIPE\ > [020] 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 00 ntsvcs.. ........ > [030] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [040] 02 00 00 00 .... >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 168 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0xa8 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 24 of length 172 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=168 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=748 > smb_uid=115 > smb_mid=7232 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 84 (0x54) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 84 (0x54) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29834 (0x748A) > smb_bcc=101 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [010] 00 05 00 00 03 10 00 00 00 54 00 00 00 01 00 00 ........ .T...... > [020] 00 3C 00 00 00 00 00 10 00 A8 DA F6 04 09 00 00 .<...... ........ > [030] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 69 00 62 ........ .\.\.i.b > [040] 00 72 00 69 00 78 00 32 00 00 00 C9 11 04 00 00 .r.i.x.2 ........ > [050] 00 00 00 00 00 04 00 00 00 64 00 66 00 73 00 00 ........ .d.f.s.. > [060] 00 01 00 00 00 ..... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans (pid 23622) conn 0x552af5b3b0 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/ipc.c:reply_trans(539) > trans <\PIPE\> data=84 params=0 setup=2 >[2006/06/23 12:37:32, 5] smbd/ipc.c:reply_trans(560) > calling named_pipe >[2006/06/23 12:37:32, 3] smbd/ipc.c:named_pipe(334) > named pipe command on <> name >[2006/06/23 12:37:32, 5] smbd/ipc.c:api_fd_reply(265) > api_fd_reply >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) > search for pipe pnum=748a >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) > pipe name srvsvc pnum=748a (pipes_open=1) >[2006/06/23 12:37:32, 3] smbd/ipc.c:api_fd_reply(294) > Got API command 0x26 on pipe "srvsvc" (pnum 748a) >[2006/06/23 12:37:32, 10] smbd/ipc.c:api_fd_reply(299) > api_fd_reply: p:0x552af93c20 max_trans_reply: 1024 >[2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) > write_to_pipe: 748a name: srvsvc open: Yes len: 84 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) > write_to_pipe: data_left = 84 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) > process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 84 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) > fill_rpc_header: data_to_copy = 84, len_needed_to_complete_hdr = 16, receive_len = 0 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) > write_to_pipe: data_used = 16 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) > write_to_pipe: data_left = 68 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) > process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 68 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0054 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) > unmarshall_rpc_header: using little-endian RPC >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) > unmarshall_rpc_header: type = 0, flags = 3 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) > write_to_pipe: data_used = 0 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) > write_to_pipe: data_left = 68 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) > process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 68, incoming data = 68 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) > process_complete_pdu: processing packet type 0 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr_req req >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 alloc_hint: 0000003c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0004 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0006 opnum : 0010 >[2006/06/23 12:37:32, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) > free_pipe_context: destroying talloc pool of size 77 >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) > Requested \PIPE\srvsvc >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) > api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO >[2006/06/23 12:37:32, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) > api_rpc_cmds[8].fn == 0x552abc10d9 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 srv_io_q_net_share_get_info >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 ptr_srv_name: 04f6daa8 >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 uni_max_len: 00000009 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c uni_str_len: 00000009 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0010 buffer : \.\.i.b.r.i.x.2... >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000022 smb_io_unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0024 uni_max_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 002c uni_str_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0030 buffer : d.f.s... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0038 info_level: 00000001 >[2006/06/23 12:37:32, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1491) > _srv_net_share_get_info: 1491 >[2006/06/23 12:37:32, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(774) > init_srv_r_net_share_get_info: 774 >[2006/06/23 12:37:32, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) > init_srv_share_info1: dfs 0 DFS root >[2006/06/23 12:37:32, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) > init_srv_share_info1_str >[2006/06/23 12:37:32, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1497) > _srv_net_share_get_info: 1497 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 srv_io_r_net_share_get_info >[2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 srv_io_srv_share_info info >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0000 switch_value : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0004 ptr_share_ctr: 00000001 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000008 srv_io_share_info1 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0008 ptr_netname: 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c type : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 ptr_remark : 00000001 >[2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000014 srv_io_share_info1_str >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000014 smb_io_unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0014 uni_max_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0018 offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 001c uni_str_len: 00000004 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0020 buffer : d.f.s... >[2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000028 smb_io_unistr2 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0028 uni_max_len: 00000009 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 002c offset : 00000000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0030 uni_str_len: 00000009 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) > 0034 buffer : D.F.S. .r.o.o.t... >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_werror(792) > 0048 status: WERR_OK >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) > api_rpcTNP: called srvsvc successfully >[2006/06/23 12:37:32, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) > free_pipe_context: destroying talloc pool of size 52 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) > write_to_pipe: data_used = 68 >[2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) > read_from_pipe: 748a name: srvsvc len: 1024 >[2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) > read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 76. >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0000 major : 05 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0001 minor : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0002 pkt_type : 02 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0003 flags : 03 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0004 pack_type0: 10 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0005 pack_type1: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0006 pack_type2: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0007 pack_type3: 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0008 frag_len : 0064 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 000a auth_len : 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 000c call_id : 00000001 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp resp >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) > 0010 alloc_hint: 0000004c >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) > 0014 context_id: 0000 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0016 cancel_ct : 00 >[2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) > 0017 reserved : 00 >[2006/06/23 12:37:32, 5] smbd/ipc.c:copy_trans_params_and_data(60) > copy_trans_params_and_data: params[0..0] data[0..100] >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=156 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=2 > smb_pid=748 > smb_uid=115 > smb_mid=7232 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 100 (0x64) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 100 (0x64) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=101 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 01 00 00 ........ .d...... > [010] 00 4C 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .L...... ........ > [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 04 00 00 ........ ........ > [030] 00 00 00 00 00 04 00 00 00 64 00 66 00 73 00 00 ........ .d.f.s.. > [040] 00 09 00 00 00 00 00 00 00 09 00 00 00 44 00 46 ........ .....D.F > [050] 00 53 00 20 00 72 00 6F 00 6F 00 74 00 00 00 00 .S. .r.o .o.t.... > [060] 00 00 00 00 00 ..... >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 41 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x29 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 25 of length 45 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=115 > smb_mid=7296 > smt_wct=3 > smb_vwv[ 0]=29834 (0x748A) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBclose (pid 23622) conn 0x552af5b3b0 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) > search for pipe pnum=748a >[2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) > pipe name srvsvc pnum=748a (pipes_open=1) >[2006/06/23 12:37:32, 5] smbd/pipes.c:reply_pipe_close(272) > reply_pipe_close: pnum:748a >[2006/06/23 12:37:32, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) > close_policy_by_pipe: deleted handle list for pipe srvsvc >[2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1166) > closed pipe name srvsvc pnum=748a (pipes_open=0) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=2 > smb_pid=65279 > smb_uid=115 > smb_mid=7296 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 88 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x58 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 26 of length 92 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7360 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 00 00 .\... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 > contains 45 SIDs > SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 > SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 > SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 > SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 > SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 > SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 > SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 > SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 > SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 > SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 > SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 > SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 > SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 > SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 > SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 > SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 > SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 > SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 > SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 > SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 > SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 > SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 > SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 > SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 > SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 > SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 > SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 > SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 > SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 > SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 > SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 > SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 > SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 > SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 > SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 > SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 > SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 > SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 > SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 > SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/06/23 12:37:32, 4] smbd/vfs.c:vfs_ChDir(738) > vfs_ChDir to /export/dfsroot >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) > allocated file structure 1850, fnum = 5946 (1 used) >[2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) > unparse_share_modes: del: 0, num: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) > print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: . >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d >[2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 5946, open name = . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7360 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=14848 (0x3A00) > smb_vwv[ 3]= 279 (0x117) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=46040 (0xB3D8) > smb_vwv[ 7]= 2238 (0x8BE) > smb_vwv[ 8]=50838 (0xC696) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62062 (0xF26E) > smb_vwv[11]=58194 (0xE352) > smb_vwv[12]=50838 (0xC696) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=46040 (0xB3D8) > smb_vwv[15]= 2238 (0x8BE) > smb_vwv[16]=50838 (0xC696) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=46040 (0xB3D8) > smb_vwv[19]= 2238 (0x8BE) > smb_vwv[20]=50838 (0xC696) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 72 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x48 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 27 of length 76 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7424 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 8 (0x8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 3A 17 EE 03 ...:... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans2 (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) > parse_share_modes: delete_on_close: 0, num_share_modes: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) > parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) > call_trans2qfilepathinfo . (fnum = 5946) level=1006 call=7 total_data=0 >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: . >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d >[2006/06/23 12:37:32, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) > call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=68 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7424 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 8 (0x8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 8 (0x8) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=13 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 70 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x46 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 28 of length 74 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7488 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 05 01 ..... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans2 (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfsinfo(2136) > call_trans2qfsinfo: level = 261 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7488 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 20 (0x14) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 20 (0x14) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=21 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T > [010] 00 46 00 53 00 .F.S. >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2qfsinfo(2465) > SMBtrans2 info_level = 261 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 41 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x29 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 29 of length 45 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=7552 > smt_wct=3 > smb_vwv[ 0]= 5946 (0x173A) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBclose (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) > close directory fnum=5946 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) > parse_share_modes: delete_on_close: 0, num_share_modes: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) > parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) > freed files structure 5946 (0 used) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=7552 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 88 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x58 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 30 of length 92 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7616 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 00 00 .\... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) > allocated file structure 1851, fnum = 5947 (1 used) >[2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) > unparse_share_modes: del: 0, num: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) > print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 2, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: . >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d >[2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 5947, open name = . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7616 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=15104 (0x3B00) > smb_vwv[ 3]= 279 (0x117) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=46040 (0xB3D8) > smb_vwv[ 7]= 2238 (0x8BE) > smb_vwv[ 8]=50838 (0xC696) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62062 (0xF26E) > smb_vwv[11]=58194 (0xE352) > smb_vwv[12]=50838 (0xC696) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=46040 (0xB3D8) > smb_vwv[15]= 2238 (0x8BE) > smb_vwv[16]=50838 (0xC696) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=46040 (0xB3D8) > smb_vwv[19]= 2238 (0x8BE) > smb_vwv[20]=50838 (0xC696) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 102 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x66 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 31 of length 106 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=102 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7680 > smt_wct=15 > smb_vwv[ 0]= 34 (0x22) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 34 (0x22) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=37 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 16 00 56 05 16 00 04 01 00 00 00 00 5C .....V.. .......\ > [010] 00 53 00 43 00 52 00 41 00 54 00 43 00 48 00 22 .S.C.R.A .T.C.H." > [020] 00 2A 00 00 00 .*... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans2 (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "SCRATCH"*" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [SCRATCH"*] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = SCRATCH"*, dirpath = , start = SCRATCH"* >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled SCRATCH"* ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component SCRATCH"* (len 9) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled SCRATCH"* ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component SCRATCH"* (len 9) ? >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(335) > New file SCRATCH"* >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) > dir=./, mask = SCRATCH"* >[2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) > dptr_num is 256, wcard = SCRATCH"*, attr = 22 >[2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) > dirpath=<./> dontdescend=<> >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 0 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 2147483648 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 771496934 >[2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) > is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) > get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: ./scratch >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d[sparse] >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) > get_lanman2_dir_entry found ./scratch fname=scratch >[2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 1671277131 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 2147483647 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset -1 >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=176 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7680 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 108 (0x6C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 108 (0x6C) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=121 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. > [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. > [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O > [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r > [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) > SMBtrans2 mask=SCRATCH"* directory=./ dirtype=22 numentries=1 >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:name_map(617) > name_map: SCRATCH"* -> 09E18AF1 -> S2QP5O~1 (cache=1) >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 41 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x29 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 32 of length 45 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=7744 > smt_wct=3 > smb_vwv[ 0]= 5947 (0x173B) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBclose (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) > close directory fnum=5947 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) > parse_share_modes: delete_on_close: 0, num_share_modes: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) > parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 2, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) > freed files structure 5947 (0 used) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=7744 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 88 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x58 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 33 of length 92 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7808 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 00 00 .\... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) > allocated file structure 1852, fnum = 5948 (1 used) >[2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) > unparse_share_modes: del: 0, num: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) > print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: . >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d >[2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 5948, open name = . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7808 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=15360 (0x3C00) > smb_vwv[ 3]= 279 (0x117) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=46040 (0xB3D8) > smb_vwv[ 7]= 2238 (0x8BE) > smb_vwv[ 8]=50838 (0xC696) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62062 (0xF26E) > smb_vwv[11]=58194 (0xE352) > smb_vwv[12]=50838 (0xC696) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=46040 (0xB3D8) > smb_vwv[15]= 2238 (0x8BE) > smb_vwv[16]=50838 (0xC696) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=46040 (0xB3D8) > smb_vwv[19]= 2238 (0x8BE) > smb_vwv[20]=50838 (0xC696) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 98 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x62 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 34 of length 102 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=98 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7872 > smt_wct=15 > smb_vwv[ 0]= 30 (0x1E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 30 (0x1E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=33 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 16 00 56 05 17 00 04 01 00 00 00 00 5C .....V.. .......\ > [010] 00 73 00 63 00 72 00 61 00 74 00 63 00 68 00 00 .s.c.r.a .t.c.h.. > [020] 00 . >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans2 (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "scratch" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = scratch, dirpath = , start = scratch >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) > conversion finished scratch -> scratch >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) > dir=./, mask = scratch >[2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) > dptr_num is 256, wcard = scratch, attr = 22 >[2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) > dirpath=<./> dontdescend=<> >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 0 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 2147483648 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 771496934 >[2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) > is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) > get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: ./scratch >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d[sparse] >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) > get_lanman2_dir_entry found ./scratch fname=scratch >[2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=176 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=7872 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 108 (0x6C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 108 (0x6C) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=121 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. > [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. > [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O > [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r > [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) > SMBtrans2 mask=scratch directory=./ dirtype=22 numentries=1 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 41 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x29 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 35 of length 45 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=7936 > smt_wct=3 > smb_vwv[ 0]= 5948 (0x173C) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBclose (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) > close directory fnum=5948 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) > parse_share_modes: delete_on_close: 0, num_share_modes: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) > parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) > freed files structure 5948 (0 used) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=7936 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 102 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x66 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 36 of length 106 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=102 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8000 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 4096 (0x1000) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=32768 (0x8000) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 8256 (0x2040) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=19 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h > [010] 00 00 00 ... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "scratch" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = scratch, dirpath = , start = scratch >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) > conversion finished scratch -> scratch >[2006/06/23 12:37:32, 3] smbd/dosmode.c:unix_mode(121) > unix_mode(scratch) returning 0744 >[2006/06/23 12:37:32, 10] smbd/open.c:open_file_ntcreate(1091) > open_file_ntcreate: fname=scratch, dos_attrs=0x0 access_mask=0x80 share_access=0x7 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0 >[2006/06/23 12:37:32, 5] smbd/open.c:open_file_ntcreate(1178) > open_file_ntcreate: FILE_OPEN requested for file scratch and file doesn't exist. >[2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) > set_bad_path_error: err = 2 bad_path = 0 >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8000 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 88 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x58 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 37 of length 92 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8064 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 00 00 .\... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) > allocated file structure 1853, fnum = 5949 (1 used) >[2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) > unparse_share_modes: del: 0, num: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) > print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: . >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d >[2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 5949, open name = . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8064 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=15616 (0x3D00) > smb_vwv[ 3]= 279 (0x117) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=46040 (0xB3D8) > smb_vwv[ 7]= 2238 (0x8BE) > smb_vwv[ 8]=50838 (0xC696) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62062 (0xF26E) > smb_vwv[11]=58194 (0xE352) > smb_vwv[12]=50838 (0xC696) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=46040 (0xB3D8) > smb_vwv[15]= 2238 (0x8BE) > smb_vwv[16]=50838 (0xC696) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=46040 (0xB3D8) > smb_vwv[19]= 2238 (0x8BE) > smb_vwv[20]=50838 (0xC696) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 98 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x62 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 38 of length 102 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=98 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8128 > smt_wct=15 > smb_vwv[ 0]= 30 (0x1E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 30 (0x1E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=33 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 16 00 56 05 17 00 04 01 00 00 00 00 5C .....V.. .......\ > [010] 00 73 00 63 00 72 00 61 00 74 00 63 00 68 00 00 .s.c.r.a .t.c.h.. > [020] 00 . >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans2 (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "scratch" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = scratch, dirpath = , start = scratch >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) > conversion finished scratch -> scratch >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) > dir=./, mask = scratch >[2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) > dptr_num is 256, wcard = scratch, attr = 22 >[2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) > dirpath=<./> dontdescend=<> >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 0 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 2147483648 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 771496934 >[2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) > is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) > get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: ./scratch >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d[sparse] >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) > get_lanman2_dir_entry found ./scratch fname=scratch >[2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=176 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8128 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 108 (0x6C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 108 (0x6C) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=121 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. > [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. > [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O > [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r > [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) > SMBtrans2 mask=scratch directory=./ dirtype=22 numentries=1 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 41 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x29 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 39 of length 45 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=8192 > smt_wct=3 > smb_vwv[ 0]= 5949 (0x173D) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBclose (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) > close directory fnum=5949 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) > parse_share_modes: delete_on_close: 0, num_share_modes: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) > parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) > freed files structure 5949 (0 used) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=8192 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 88 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x58 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 40 of length 92 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8256 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 00 00 .\... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) > allocated file structure 1854, fnum = 5950 (1 used) >[2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) > unparse_share_modes: del: 0, num: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) > print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 5, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: . >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d >[2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 5950, open name = . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8256 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=15872 (0x3E00) > smb_vwv[ 3]= 279 (0x117) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=46040 (0xB3D8) > smb_vwv[ 7]= 2238 (0x8BE) > smb_vwv[ 8]=50838 (0xC696) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62062 (0xF26E) > smb_vwv[11]=58194 (0xE352) > smb_vwv[12]=50838 (0xC696) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=46040 (0xB3D8) > smb_vwv[15]= 2238 (0x8BE) > smb_vwv[16]=50838 (0xC696) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=46040 (0xB3D8) > smb_vwv[19]= 2238 (0x8BE) > smb_vwv[20]=50838 (0xC696) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 70 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x46 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 41 of length 74 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8320 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 05 01 ..... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans2 (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfsinfo(2136) > call_trans2qfsinfo: level = 261 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8320 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 20 (0x14) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 20 (0x14) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=21 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T > [010] 00 46 00 53 00 .F.S. >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2qfsinfo(2465) > SMBtrans2 info_level = 261 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 41 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x29 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 42 of length 45 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=8384 > smt_wct=3 > smb_vwv[ 0]= 5950 (0x173E) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBclose (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) > close directory fnum=5950 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) > parse_share_modes: delete_on_close: 0, num_share_modes: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) > parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 5, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) > freed files structure 5950 (0 used) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=8384 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 88 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x58 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 43 of length 92 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8448 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 00 00 .\... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) > allocated file structure 1855, fnum = 5951 (1 used) >[2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) > unparse_share_modes: del: 0, num: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) > print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: . >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d >[2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) > reply_ntcreate_and_X: fnum = 5951, open name = . >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8448 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=16128 (0x3F00) > smb_vwv[ 3]= 279 (0x117) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=46040 (0xB3D8) > smb_vwv[ 7]= 2238 (0x8BE) > smb_vwv[ 8]=50838 (0xC696) > smb_vwv[ 9]= 1 (0x1) > smb_vwv[10]=62062 (0xF26E) > smb_vwv[11]=58194 (0xE352) > smb_vwv[12]=50838 (0xC696) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=46040 (0xB3D8) > smb_vwv[15]= 2238 (0x8BE) > smb_vwv[16]=50838 (0xC696) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=46040 (0xB3D8) > smb_vwv[19]= 2238 (0x8BE) > smb_vwv[20]=50838 (0xC696) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 1792 (0x700) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 98 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x62 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 44 of length 102 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=98 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8512 > smt_wct=15 > smb_vwv[ 0]= 30 (0x1E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 30 (0x1E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=33 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 00 00 16 00 56 05 17 00 04 01 00 00 00 00 5C .....V.. .......\ > [010] 00 73 00 63 00 72 00 61 00 74 00 63 00 68 00 00 .s.c.r.a .t.c.h.. > [020] 00 . >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBtrans2 (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "scratch" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = scratch, dirpath = , start = scratch >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) > conversion finished scratch -> scratch >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) > dir=./, mask = scratch >[2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) > dptr_num is 256, wcard = scratch, attr = 22 >[2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) > dirpath=<./> dontdescend=<> >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 0 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 2147483648 >[2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) > get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 771496934 >[2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) > is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) > get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) > dos_mode: ./scratch >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) > dos_mode_from_sbuf returning d >[2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) > dos_mode returning d[sparse] >[2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) > get_lanman2_dir_entry found ./scratch fname=scratch >[2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 >[2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) > t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=176 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8512 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 108 (0x6C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 108 (0x6C) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=121 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. > [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. > [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O > [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r > [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . >[2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) > SMBtrans2 mask=scratch directory=./ dirtype=22 numentries=1 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 41 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x29 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 45 of length 45 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=8576 > smt_wct=3 > smb_vwv[ 0]= 5951 (0x173F) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBclose (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) > close directory fnum=5951 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) > parse_share_modes: delete_on_close: 0, num_share_modes: 1 >[2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) > parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362 >[2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) > freed files structure 5951 (0 used) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=115 > smb_mid=8576 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 102 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x66 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 46 of length 106 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=102 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8640 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 4096 (0x1000) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=19 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h > [010] 00 00 00 ... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) > change_to_user: Skipping user change - already user >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "scratch" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = scratch, dirpath = , start = scratch >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) > conversion finished scratch -> scratch >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory scratch, access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1823) > open_directory: FILE_OPEN requested for directory scratch and it doesn't exist. >[2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) > set_bad_path_error: err = 2 bad_path = 0 >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8640 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 1438 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x59e >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 47 of length 1442 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=1438 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=8704 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 1438 (0x59E) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1276 (0x4FC) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 212 (0xD4) > smb_vwv[11]=40960 (0xA000) > smb_bcc=1379 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ > [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... > [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ > [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ > [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... > [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ > [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... > [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ > [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . > [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. > [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. > [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ > [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... > [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. > [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. > [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. > [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. > [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. > [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p > [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., > [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ > [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L > [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. > [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... > [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. > [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... > [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... > [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< > [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. > [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL > [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. > [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBsesssetupX (pid 23622) conn 0x0 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) > NT user token: (NULL) >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) > wct=12 flg2=0xc807 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) > Doing spnego session setup >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) > NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) > register_vuid: allocated vuid = 117 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 48018 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 2 840 113554 1 2 2 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) > Got OID 1 3 6 1 4 1 311 2 2 10 >[2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) > Got secblob of size 1210 >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) > secrets_named_mutex: got mutex for replay cache mutex >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) > ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type >[2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) > secrets_named_mutex: released mutex for replay cache mutex >[2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) > ads_verify_ticket: krb5_rd_req with auth failed (Success) >[2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) > Failed to verify incoming ticket! >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0x73 > smb_rcls=109 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=65279 > smb_uid=117 > smb_mid=8704 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) > got smb length of 102 >[2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) > got message type 0x0 of len 0x66 >[2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) > Transaction 48 of length 106 >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=102 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8768 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 4096 (0x1000) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 64 (0x40) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=19 >[2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) > [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h > [010] 00 00 00 ... >[2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) > switch message SMBntcreateX (pid 23622) conn 0x552af72460 >[2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) > NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 > contains 45 SIDs > SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 > SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 > SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 > SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 > SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 > SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 > SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 > SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 > SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 > SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 > SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 > SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 > SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 > SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 > SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 > SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 > SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 > SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 > SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 > SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 > SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 > SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 > SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 > SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 > SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 > SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 > SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 > SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 > SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 > SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 > SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 > SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 > SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 > SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 > SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 > SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 > SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 > SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 > SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 > SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 > SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) > reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "scratch" >[2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = scratch, dirpath = , start = scratch >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled scratch ? >[2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component scratch (len 7) ? >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch >[2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) > conversion finished scratch -> scratch >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) > open_directory: opening directory scratch, access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 >[2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1823) > open_directory: FILE_OPEN requested for directory scratch and it doesn't exist. >[2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) > set_bad_path_error: err = 2 bad_path = 0 >[2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) >[2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=748 > smb_uid=115 > smb_mid=8768 > smt_wct=0 > smb_bcc=0 >[2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) > change_notify_timeout: -1 >[2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) > run_events: No events >[2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/06/23 12:37:36, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1151080646) - last(1151080612) < 900 >[2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) > dump_workgroups() > dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2) >[2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) > dump_workgroups() > dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2) >[2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 3853
: 1979 |
1980
|
1981
|
2022
|
2023