[2006/06/23 12:38:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:38:16, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080686) - last(1151080612) < 900 [2006/06/23 12:38:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:38:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:38:22, 3] smbd/oplock.c:init_oplocks(871) open_oplock_ipc: initializing messages. [2006/06/23 12:38:22, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(259) Linux kernel oplocks enabled [2006/06/23 12:38:22, 4] lib/time.c:TimeInit(142) TimeInit: Serverzone is 14400 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 133 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x85 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 0 of length 137 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBnegprot (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [PC NETWORK PROGRAM 1.0] [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [LANMAN1.0] [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [Windows for Workgroups 3.1a] [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [LM1.2X002] [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [LANMAN2.1] [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [NT LM 0.12] [2006/06/23 12:38:22, 10] lib/util.c:set_remote_arch(2033) set_remote_arch: Client arch is 'Win2K' [2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170) claiming 0 [2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:38:22, 10] lib/util.c:name_to_fqdn(2675) name_to_fqdn: lookup for IBRIX2 -> IBRIX2.tigr.org. [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_nt1(357) using SPNEGO [2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(579) Selected protocol NT LM 0.12 [2006/06/23 12:38:22, 5] smbd/negprot.c:reply_negprot(585) negprot index=5 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=27136 (0x6A00) smb_vwv[ 8]= 92 (0x5C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=49107 (0xBFD3) smb_vwv[13]=58224 (0xE370) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]=26880 (0x6900) smb_bcc=105 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 69 62 72 69 78 32 00 00 00 00 00 00 00 00 00 00 ibrix2.. ........ [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 24 `W..+... ...M0K.$ [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......* [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... [040] 37 02 02 0A A3 23 30 21 A0 1F 1B 1D 63 69 66 73 7....#0! ....cifs [050] 2F 69 62 72 69 78 32 2E 74 69 67 72 2E 6F 72 67 /ibrix2. tigr.org [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 236 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0xec [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 1 of length 240 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3456 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:38:22, 10] lib/util.c:set_remote_arch(2033) set_remote_arch: Client arch is 'WinXP' [2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 100 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 40 [2006/06/23 12:38:22, 5] auth/auth.c:make_auth_context_subsystem(503) Making default auth method list for security=ADS [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match ntdomain [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method ntdomain has a valid init [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method winbind has a valid init [2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module winbind did not want to specify a challenge [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058) [000] DC BA C6 26 31 B3 76 2D ...&1.v- [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=262 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=3456 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 173 (0xAD) smb_bcc=219 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] A1 81 AA 30 81 A7 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 91 04 81 8E 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0 [030] 00 00 00 B5 82 89 60 DC BA C6 26 31 B3 76 2D 00 ......`. ..&1.v-. [040] 00 00 00 00 00 00 00 56 00 56 00 38 00 00 00 54 .......V .V.8...T [050] 00 49 00 47 00 52 00 02 00 08 00 54 00 49 00 47 .I.G.R.. ...T.I.G [060] 00 52 00 01 00 0C 00 49 00 42 00 52 00 49 00 58 .R.....I .B.R.I.X [070] 00 32 00 04 00 10 00 74 00 69 00 67 00 72 00 2E .2.....t .i.g.r.. [080] 00 6F 00 72 00 67 00 03 00 1E 00 69 00 62 00 72 .o.r.g.. ...i.b.r [090] 00 69 00 78 00 32 00 2E 00 74 00 69 00 67 00 72 .i.x.2.. .t.i.g.r [0A0] 00 2E 00 6F 00 72 00 67 00 00 00 00 00 55 00 6E ...o.r.g .....U.n [0B0] 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 .i.x...S .a.m.b.a [0C0] 00 20 00 33 00 2E 00 30 00 2E 00 32 00 32 00 00 . .3...0 ...2.2.. [0D0] 00 54 00 49 00 47 00 52 00 00 00 .T.I.G.R ... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 278 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x116 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 2 of length 282 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=278 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=3520 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 278 (0x116) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 117 (0x75) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=219 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] A1 73 30 71 A2 6F 04 6D 4E 54 4C 4D 53 53 50 00 .s0q.o.m NTLMSSP. [010] 03 00 00 00 01 00 01 00 5C 00 00 00 00 00 00 00 ........ \....... [020] 5D 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ]....... H....... [030] 48 00 00 00 14 00 14 00 48 00 00 00 10 00 10 00 H....... H....... [040] 5D 00 00 00 15 8A 88 62 05 01 28 0A 00 00 00 0F ]......b ..(..... [050] 4B 00 52 00 45 00 41 00 50 00 45 00 52 00 2D 00 K.R.E.A. P.E.R.-. [060] 58 00 50 00 00 EC EE 16 40 2C 61 D0 7C 26 85 7C X.P..... @,a.|&.| [070] 0F 68 65 CC EF 57 00 69 00 6E 00 64 00 6F 00 77 .he..W.i .n.d.o.w [080] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 53 .s. .2.0 .0.2. .S [090] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e. .P [0A0] 00 61 00 63 00 6B 00 20 00 32 00 20 00 32 00 36 .a.c.k. .2. .2.6 [0B0] 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F .0.0...W .i.n.d.o [0C0] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [0D0] 00 35 00 2E 00 31 00 00 00 00 00 .5...1.. ... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(662) Got user=[] domain=[] workstation=[KREAPER-XP] len1=1 len2=0 [2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info_map(163) make_user_info_map: Mapping user []\[] from workstation [KREAPER-XP] [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jun 23 12:47:32 2006 [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_set(130) Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Fri Jun 23 12:48:22 2006 (600 seconds ahead) [2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(43) ads_dc_name: domain=TIGR [2006/06/23 12:38:22, 6] libads/ldap.c:ads_find_dc(217) ads_find_dc: looking for realm 'TIGR.ORG' [2006/06/23 12:38:22, 8] libsmb/namequery.c:get_sorted_dc_list(1433) get_sorted_dc_list: attempting lookup using [ads] [2006/06/23 12:38:22, 10] libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up dc.tigr.org#20 [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 [2006/06/23 12:38:22, 5] libsmb/namecache.c:namecache_fetch(201) name dc.tigr.org#20 found. [2006/06/23 12:38:22, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1407) get_dc_list: 172.17.5.33:389 [2006/06/23 12:38:22, 5] libads/ldap.c:ads_try_connect(126) ads_try_connect: trying ldap server '172.17.5.33' port 389 [2006/06/23 12:38:22, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 172.17.5.33 [2006/06/23 12:38:22, 3] libads/ldap.c:ads_server_info(2542) got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG [2006/06/23 12:38:22, 4] libads/ldap.c:ads_server_info(2548) time offset is 0 seconds [2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(63) ads_dc_name: using server='TIGRDC2' IP=172.17.5.33 [2006/06/23 12:38:22, 3] libsmb/cliconnect.c:cli_start_connection(1389) Connecting to host=TIGRDC2 [2006/06/23 12:38:22, 3] lib/util_sock.c:open_socket_out(870) Connecting to 172.17.5.33 at port 445 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,183) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,183) wrote 183 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 174 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]= 5760 (0x1680) smb_vwv[12]= 891 (0x37B) smb_vwv[13]=58225 (0xE371) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]= 5760 (0x1680) smb_vwv[12]= 891 (0x37B) smb_vwv[13]=58225 (0xE371) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,92) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,92) wrote 92 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 179 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=14338 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=14338 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,82) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,82) wrote 82 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 48 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_init_creds(233) cli_init_creds: user domain [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,104) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,104) wrote 104 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 103 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 1792 (0x700) smb_vwv[ 3]= 384 (0x180) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[8007]: \lsarpc auth_type 0, auth_level 0 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0048 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_contexts: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c context_id : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001e num_transfer_syntaxes: 01 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 12345778 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1234 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : abcd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : ef 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 01 23 45 67 89 ab [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003c data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 version: 00000002 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32775 (0x8007) smb_bcc=87 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,158) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,158) wrote 158 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 124 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 10 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 10 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 returned 68 bytes. [2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 bind request returned ok. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 0106cb10 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0018 len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a str: \PIPE\lsass. [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 num_results: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002c result : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002e reason : 0000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0034 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0036 data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0038 data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003a data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 version: 00000002 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine TIGRDC2 and bound anonymously. [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(142) init_lsa_sec_qos [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_open_pol(261) init_open_pol: attr:0 da:1 [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193) init_lsa_obj_attr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_open_pol [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr : 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 system_name: 005c [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 lsa_io_obj_attr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 len : 00000018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c ptr_root_dir: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 ptr_obj_name: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 attributes : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 ptr_sec_desc: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c ptr_sec_qos : 00000001 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 lsa_io_obj_qos sec_qos [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 len : 0000000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 sec_imp_level : 0002 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0026 sec_ctxt_mode : 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0027 effective_only: 00 [2006/06/23 12:38:22, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) lsa_io_sec_qos: length c does not match size 8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 des_access: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000002 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000002c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 0006 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32775 (0x8007) smb_bcc=83 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ [050] 00 00 00 ... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,154) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,154) wrote 154 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 104 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 FA 56 6D ........ ......Vm [020] 5D 61 0F 91 4F 9C 0B 3A 64 46 1F 63 BD 00 00 00 ]a..O..: dF.c.... [030] 00 . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 FA 56 6D ........ ......Vm [020] 5D 61 0F 91 4F 9C 0B 3A 64 46 1F 63 BD 00 00 00 ]a..O..: dF.c.... [030] 00 . [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0030 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000002 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 48 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 returned 48 bytes. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_open_pol [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 data1: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 data2: 5d6d56fa [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 data3: 0f61 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a data4: 4f91 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000c data5: 9c 0b 3a 64 46 1f 63 bd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 0014 status: NT_STATUS_OK [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(477) init_q_enum_trust_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_enum_trust_dom [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 data1: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 data2: 5d6d56fa [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 data3: 0f61 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a data4: 4f91 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000c data5: 9c 0b 3a 64 46 1f 63 bd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 enum_context : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 preferred_len: 00010000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0034 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000003 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000001c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 000d [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=134 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 52 (0x34) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 52 (0x34) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32775 (0x8007) smb_bcc=67 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ [020] 00 00 00 00 00 0D 00 00 00 00 00 FA 56 6D 5D 61 ........ ....Vm]a [030] 0F 91 4F 9C 0B 3A 64 46 1F 63 BD 00 00 00 00 00 ..O..:dF .c...... [040] 00 01 00 ... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,138) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,138) wrote 138 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 96 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0028 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000003 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000010 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 returned 32 bytes. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_enum_trust_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 enum_context: 80000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 count: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 ptr: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 000c status: NT_STATUS_NO_MORE_ENTRIES [2006/06/23 12:38:22, 10] libsmb/trusts_util.c:enumerate_domain_trusts(196) enumerate_domain_trusts: shutting down connection... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,45) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,45) wrote 45 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=8 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) cli_rpc_pipe_close: closed pipe \lsarpc to machine TIGRDC2 [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,39) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,39) wrote 39 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45061 smb_pid=23658 smb_uid=14338 smb_mid=9 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(294) Cache entry with key = TDOM/TIGR couldn't be found [2006/06/23 12:38:22, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) no entry for trusted domain TIGR found. [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(69) attempting to make a user_info for () [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(79) making strings for 's user_info struct [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(121) making blobs for 's user_info struct [2006/06/23 12:38:22, 10] auth/auth_util.c:make_user_info(139) made an encrypted user_info for () [2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[KREAPER-XP] with the new password interface [2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [TIGR]\[]@[KREAPER-XP] [2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by random [2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058) [000] DC BA C6 26 31 B3 76 2D ...&1.v- [2006/06/23 12:38:22, 10] lib/account_pol.c:account_policy_get(332) account_policy_get: name: password history, val: 0 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username nobody, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain IBRIX2, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) pdb_set_nt_username: setting nt username , was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name nobody, was [2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359) Home server: ibrix2 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\ibrix2\nobody, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive , was NULL [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script , was [2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359) Home server: ibrix2 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\ibrix2\nobody\profile, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_workstations(885) pdb_set_workstations: setting workstations , was [2006/06/23 12:38:22, 10] lib/account_pol.c:account_policy_get(332) account_policy_get: name: password history, val: 0 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-501 [2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-501 from rid 501 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-514 [2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-514 from rid 514 [2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2006/06/23 12:38:22, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2006/06/23 12:38:22, 5] auth/auth_util.c:free_user_info(1485) attempting to free (and zero) a user_info structure [2006/06/23 12:38:22, 10] auth/auth_util.c:free_user_info(1488) structure was created for [2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(120) Got NT session key of length 16 [2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(127) Got LM session key of length 16 [2006/06/23 12:38:22, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(755) ntlmssp_server_auth: Using unmodified nt session key. [2006/06/23 12:38:22, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0x60088235 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_SEAL NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 101 [2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98) Got nobody from pwnam_cache [2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(255) register_vuid: (99,99) nobody IBRIX2 guest=1 [2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(257) User name: nobody Real name: nobody [2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(276) UNIX uid 99 is UNIX user nobody, and will be vuid 101 [2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=98 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=3520 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=55 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 32 00 00 00 54 00 49 ...0...2 .2...T.I [030] 00 47 00 52 00 00 00 .G.R... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 90 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x5a [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 3 of length 94 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=90 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=3584 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 90 (0x5A) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=47 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 .\.\.1.7 .2...1.7 [010] 00 2E 00 34 00 39 00 2E 00 31 00 32 00 5C 00 49 ...4.9.. .1.2.\.I [020] 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F 3F 00 .P.C.$.. .?????. [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtconX (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 4] smbd/reply.c:reply_tcon_and_X(660) Client requested device type [?????] for share [IPC$] [2006/06/23 12:38:22, 5] smbd/service.c:make_connection(860) making a connection to 'normal' service ipc$ [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user nobody [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is nobody [2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98) Got nobody from pwnam_cache [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [nobody]! [2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(488) Connect path is '/tmp' for service [IPC$] [2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for IPC$ [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 7 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-501. [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-501 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1199 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1181 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216) Initialising default vfs hooks [2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2006/06/23 12:38:22, 10] smbd/uid.c:is_share_read_only_for_user(127) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for IPC$ [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 7 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-501. [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-501 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1199 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1181 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-1055192801-1434710095-1259064960-501 contains 7 SIDs SID[ 0]: S-1-5-21-1055192801-1434710095-1259064960-501 SID[ 1]: S-1-5-21-1055192801-1434710095-1259064960-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-1055192801-1434710095-1259064960-1199 SID[ 6]: S-1-5-21-1055192801-1434710095-1259064960-1181 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 99 Primary group is 99 and contains 2 supplementary groups Group[ 0]: 99 Group[ 1]: 90 [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(99,99) gid=(0,99) [2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(693) kreaper-xp (172.17.134.118) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 23658) [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 3] smbd/reply.c:reply_tcon_and_X(708) tconX service=IPC$ [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=3584 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 106 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x6a [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 4 of length 110 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=106 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=4 smb_uid=101 smb_mid=3648 smt_wct=15 smb_vwv[ 0]= 38 (0x26) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 38 (0x26) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 16 (0x10) smb_bcc=41 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 03 00 5C 00 31 00 37 00 32 00 2E 00 31 .....\.1 .7.2...1 [010] 00 37 00 2E 00 34 00 39 00 2E 00 31 00 32 00 5C .7...4.9 ...1.2.\ [020] 00 64 00 66 00 73 00 00 00 .d.f.s.. . [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af6f3a0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-1055192801-1434710095-1259064960-501 contains 7 SIDs SID[ 0]: S-1-5-21-1055192801-1434710095-1259064960-501 SID[ 1]: S-1-5-21-1055192801-1434710095-1259064960-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-1055192801-1434710095-1259064960-1199 SID[ 6]: S-1-5-21-1055192801-1434710095-1259064960-1181 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 99 Primary group is 99 and contains 2 supplementary groups Group[ 0]: 99 Group[ 1]: 90 [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(99,99) gid=(0,99) [2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2getdfsreferral(4668) call_trans2getdfsreferral [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(44) temp in parse_dfs_path: .172.17.49.12\dfs. after trimming \'s [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(54) parse_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(835) max_referral_level :3 [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(711) setting up version3 referral [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(715) [2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058) [000] 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E 00 \.1.7.2. ..1.7... [010] 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 00 4.9...1. 2.\.d.f. [020] 73 00 00 00 s... [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(724) referral 0 : \172.17.49.12\dfs [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(855) DFS Referral pdata: [2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058) [000] 22 00 01 00 03 00 00 00 03 00 22 00 01 00 00 00 "....... .."..... [010] 58 02 00 00 22 00 46 00 6A 00 00 00 00 00 00 00 X...".F. j....... [020] 00 00 00 00 00 00 00 00 00 00 5C 00 31 00 37 00 ........ ..\.1.7. [030] 32 00 2E 00 31 00 37 00 2E 00 34 00 39 00 2E 00 2...1.7. ..4.9... [040] 31 00 32 00 5C 00 64 00 66 00 73 00 00 00 5C 00 1.2.\.d. f.s...\. [050] 31 00 37 00 32 00 2E 00 31 00 37 00 2E 00 34 00 1.7.2... 1.7...4. [060] 39 00 2E 00 31 00 32 00 5C 00 64 00 66 00 73 00 9...1.2. \.d.f.s. [070] 00 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 ..\.1.7. 2...1.7. [080] 2E 00 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 ..4.9... 1.2.\.d. [090] 66 00 73 00 00 00 f.s... [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 150, useable_space = 131012 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 150, paramsize = 0, datasize = 150 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=206 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55361 smb_tid=1 smb_pid=4 smb_uid=101 smb_mid=3648 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 150 (0x96) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 150 (0x96) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=151 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 22 00 01 00 03 00 00 00 03 00 22 00 01 00 00 ."...... ...".... [010] 00 58 02 00 00 22 00 46 00 6A 00 00 00 00 00 00 .X...".F .j...... [020] 00 00 00 00 00 00 00 00 00 00 00 5C 00 31 00 37 ........ ...\.1.7 [030] 00 32 00 2E 00 31 00 37 00 2E 00 34 00 39 00 2E .2...1.7 ...4.9.. [040] 00 31 00 32 00 5C 00 64 00 66 00 73 00 00 00 5C .1.2.\.d .f.s...\ [050] 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E 00 34 .1.7.2.. .1.7...4 [060] 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 00 73 .9...1.2 .\.d.f.s [070] 00 00 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 ...\.1.7 .2...1.7 [080] 00 2E 00 34 00 39 00 2E 00 31 00 32 00 5C 00 64 ...4.9.. .1.2.\.d [090] 00 66 00 73 00 00 00 .f.s... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 236 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0xec [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 5 of length 240 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3712 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 102 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 40 [2006/06/23 12:38:22, 5] auth/auth.c:make_auth_context_subsystem(503) Making default auth method list for security=ADS [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match ntdomain [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method ntdomain has a valid init [2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method winbind has a valid init [2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module winbind did not want to specify a challenge [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058) [000] F9 13 27 9F D1 89 BC B8 ..'..... [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=262 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=3712 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 173 (0xAD) smb_bcc=219 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] A1 81 AA 30 81 A7 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 91 04 81 8E 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0 [030] 00 00 00 B5 82 89 60 F9 13 27 9F D1 89 BC B8 00 ......`. .'...... [040] 00 00 00 00 00 00 00 56 00 56 00 38 00 00 00 54 .......V .V.8...T [050] 00 49 00 47 00 52 00 02 00 08 00 54 00 49 00 47 .I.G.R.. ...T.I.G [060] 00 52 00 01 00 0C 00 49 00 42 00 52 00 49 00 58 .R.....I .B.R.I.X [070] 00 32 00 04 00 10 00 74 00 69 00 67 00 72 00 2E .2.....t .i.g.r.. [080] 00 6F 00 72 00 67 00 03 00 1E 00 69 00 62 00 72 .o.r.g.. ...i.b.r [090] 00 69 00 78 00 32 00 2E 00 74 00 69 00 67 00 72 .i.x.2.. .t.i.g.r [0A0] 00 2E 00 6F 00 72 00 67 00 00 00 00 00 55 00 6E ...o.r.g .....U.n [0B0] 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 .i.x...S .a.m.b.a [0C0] 00 20 00 33 00 2E 00 30 00 2E 00 32 00 32 00 00 . .3...0 ...2.2.. [0D0] 00 54 00 49 00 47 00 52 00 00 00 .T.I.G.R ... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 350 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x15e [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 6 of length 354 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=350 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=3776 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 350 (0x15E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 188 (0xBC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=291 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] A1 81 B9 30 81 B6 A2 81 B3 04 81 B0 4E 54 4C 4D ...0.... ....NTLM [010] 53 53 50 00 03 00 00 00 18 00 18 00 70 00 00 00 SSP..... ....p... [020] 18 00 18 00 88 00 00 00 08 00 08 00 48 00 00 00 ........ ....H... [030] 0C 00 0C 00 50 00 00 00 14 00 14 00 5C 00 00 00 ....P... ....\... [040] 10 00 10 00 A0 00 00 00 15 82 88 62 05 01 28 0A ........ ...b..(. [050] 00 00 00 0F 54 00 49 00 47 00 52 00 72 00 61 00 ....T.I. G.R.r.a. [060] 6A 00 65 00 65 00 76 00 4B 00 52 00 45 00 41 00 j.e.e.v. K.R.E.A. [070] 50 00 45 00 52 00 2D 00 58 00 50 00 58 52 A0 C3 P.E.R.-. X.P.XR.. [080] 0D 3B 83 3A 00 00 00 00 00 00 00 00 00 00 00 00 .;.:.... ........ [090] 00 00 00 00 A0 CC F4 BF 35 DB DE 5D 22 88 3A 14 ........ 5..]".:. [0A0] 81 D0 00 44 C6 77 54 CC ED A8 DC E9 EE 79 D8 12 ...D.wT. .....y.. [0B0] D1 5A ED 9E 28 6C E1 6F 99 E5 52 B9 00 57 00 69 .Z..(l.o ..R..W.i [0C0] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0D0] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [0E0] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [0F0] 00 32 00 20 00 32 00 36 00 30 00 30 00 00 00 57 .2. .2.6 .0.0...W [100] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 .i.n.d.o .w.s. .2 [110] 00 30 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 .0.0.2. .5...1.. [120] 00 00 00 ... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(662) Got user=[rajeev] domain=[TIGR] workstation=[KREAPER-XP] len1=24 len2=24 [2006/06/23 12:38:22, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66) auth_context challenge set by NTLMSSP callback (NTLM2) [2006/06/23 12:38:22, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67) challenge is: [2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058) [000] C8 6D E8 54 4D 53 61 F1 .m.TMSa. [2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info_map(163) make_user_info_map: Mapping user [TIGR]\[rajeev] from workstation [KREAPER-XP] [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jun 23 12:48:22 2006 [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_set(130) Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Fri Jun 23 12:48:22 2006 (600 seconds ahead) [2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(43) ads_dc_name: domain=TIGR [2006/06/23 12:38:22, 6] libads/ldap.c:ads_find_dc(217) ads_find_dc: looking for realm 'TIGR.ORG' [2006/06/23 12:38:22, 8] libsmb/namequery.c:get_sorted_dc_list(1433) get_sorted_dc_list: attempting lookup using [ads] [2006/06/23 12:38:22, 10] libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up dc.tigr.org#20 [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 [2006/06/23 12:38:22, 5] libsmb/namecache.c:namecache_fetch(201) name dc.tigr.org#20 found. [2006/06/23 12:38:22, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1407) get_dc_list: 172.17.5.33:389 [2006/06/23 12:38:22, 5] libads/ldap.c:ads_try_connect(126) ads_try_connect: trying ldap server '172.17.5.33' port 389 [2006/06/23 12:38:22, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 172.17.5.33 [2006/06/23 12:38:22, 3] libads/ldap.c:ads_server_info(2542) got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG [2006/06/23 12:38:22, 4] libads/ldap.c:ads_server_info(2548) time offset is 0 seconds [2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(63) ads_dc_name: using server='TIGRDC2' IP=172.17.5.33 [2006/06/23 12:38:22, 3] libsmb/cliconnect.c:cli_start_connection(1389) Connecting to host=TIGRDC2 [2006/06/23 12:38:22, 3] lib/util_sock.c:open_socket_out(870) Connecting to 172.17.5.33 at port 445 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,183) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,183) wrote 183 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 174 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=53888 (0xD280) smb_vwv[12]= 2111 (0x83F) smb_vwv[13]=58225 (0xE371) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=53888 (0xD280) smb_vwv[12]= 2111 (0x83F) smb_vwv[13]=58225 (0xE371) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,92) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,92) wrote 92 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 179 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=4097 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=4097 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,82) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,82) wrote 82 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 48 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_init_creds(233) cli_init_creds: user domain [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,104) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,104) wrote 104 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 103 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 320 (0x140) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[4002]: \lsarpc auth_type 0, auth_level 0 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0048 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000004 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_contexts: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c context_id : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001e num_transfer_syntaxes: 01 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 12345778 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1234 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : abcd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : ef 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 01 23 45 67 89 ab [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003c data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 version: 00000002 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16386 (0x4002) smb_bcc=87 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 04 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,158) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,158) wrote 158 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 124 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... [010] 00 B8 10 B8 10 11 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... [010] 00 B8 10 B8 10 11 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000004 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 returned 68 bytes. [2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 bind request returned ok. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000004 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 0106cb11 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0018 len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a str: \PIPE\lsass. [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 num_results: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002c result : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002e reason : 0000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0034 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0036 data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0038 data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003a data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 version: 00000002 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine TIGRDC2 and bound anonymously. [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(142) init_lsa_sec_qos [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_open_pol(261) init_open_pol: attr:0 da:1 [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193) init_lsa_obj_attr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_open_pol [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr : 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 system_name: 005c [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 lsa_io_obj_attr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 len : 00000018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c ptr_root_dir: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 ptr_obj_name: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 attributes : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 ptr_sec_desc: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c ptr_sec_qos : 00000001 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 lsa_io_obj_qos sec_qos [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 len : 0000000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 sec_imp_level : 0002 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0026 sec_ctxt_mode : 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0027 effective_only: 00 [2006/06/23 12:38:22, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) lsa_io_sec_qos: length c does not match size 8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 des_access: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000005 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000002c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 0006 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16386 (0x4002) smb_bcc=83 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 44 00 00 00 05 00 00 00 2C .......D ......., [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ [050] 00 00 00 ... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,154) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,154) wrote 154 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 104 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 05 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 72 40 4B ........ .....r@K [020] D2 F1 DD 7A 42 85 C6 A9 D6 C2 69 9F 2D 00 00 00 ...zB... ..i.-... [030] 00 . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 05 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 72 40 4B ........ .....r@K [020] D2 F1 DD 7A 42 85 C6 A9 D6 C2 69 9F 2D 00 00 00 ...zB... ..i.-... [030] 00 . [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0030 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000005 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 48 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 returned 48 bytes. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_open_pol [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 data1: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 data2: d24b4072 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 data3: ddf1 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a data4: 427a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000c data5: 85 c6 a9 d6 c2 69 9f 2d [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 0014 status: NT_STATUS_OK [2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(477) init_q_enum_trust_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_enum_trust_dom [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 data1: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 data2: d24b4072 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 data3: ddf1 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a data4: 427a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000c data5: 85 c6 a9 d6 c2 69 9f 2d [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 enum_context : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 preferred_len: 00010000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0034 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000006 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000001c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 000d [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=134 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 52 (0x34) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 52 (0x34) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16386 (0x4002) smb_bcc=67 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 34 00 00 00 06 00 00 00 1C .......4 ........ [020] 00 00 00 00 00 0D 00 00 00 00 00 72 40 4B D2 F1 ........ ...r@K.. [030] DD 7A 42 85 C6 A9 D6 C2 69 9F 2D 00 00 00 00 00 .zB..... i.-..... [040] 00 01 00 ... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,138) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,138) wrote 138 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 96 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0028 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000006 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000010 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 returned 32 bytes. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_enum_trust_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 enum_context: 80000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 count: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 ptr: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 000c status: NT_STATUS_NO_MORE_ENTRIES [2006/06/23 12:38:22, 10] libsmb/trusts_util.c:enumerate_domain_trusts(196) enumerate_domain_trusts: shutting down connection... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,45) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,45) wrote 45 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=8 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) cli_rpc_pipe_close: closed pipe \lsarpc to machine TIGRDC2 [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,39) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,39) wrote 39 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=2053 smb_pid=23658 smb_uid=4097 smb_mid=9 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(294) Cache entry with key = TDOM/TIGR couldn't be found [2006/06/23 12:38:22, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) no entry for trusted domain TIGR found. [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(69) attempting to make a user_info for rajeev (rajeev) [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(79) making strings for rajeev's user_info struct [2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(121) making blobs for rajeev's user_info struct [2006/06/23 12:38:22, 10] auth/auth_util.c:make_user_info(139) made an encrypted user_info for rajeev (rajeev) [2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [TIGR]\[rajeev]@[KREAPER-XP] with the new password interface [2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [TIGR]\[rajeev]@[KREAPER-XP] [2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058) [000] C8 6D E8 54 4D 53 61 F1 .m.TMSa. [2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(259) check_ntlm_password: guest had nothing to say [2006/06/23 12:38:22, 8] lib/util.c:is_myname(1879) is_myname("TIGR") returns 0 [2006/06/23 12:38:22, 6] auth/auth_sam.c:check_samstrict_security(383) check_samstrict_security: TIGR is not one of my local names (ROLE_DOMAIN_MEMBER) [2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(259) check_ntlm_password: sam had nothing to say [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(43) ads_dc_name: domain=TIGR [2006/06/23 12:38:22, 6] libads/ldap.c:ads_find_dc(217) ads_find_dc: looking for realm 'TIGR.ORG' [2006/06/23 12:38:22, 8] libsmb/namequery.c:get_sorted_dc_list(1433) get_sorted_dc_list: attempting lookup using [ads] [2006/06/23 12:38:22, 10] libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up dc.tigr.org#20 [2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 [2006/06/23 12:38:22, 5] libsmb/namecache.c:namecache_fetch(201) name dc.tigr.org#20 found. [2006/06/23 12:38:22, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1407) get_dc_list: 172.17.5.33:389 [2006/06/23 12:38:22, 5] libads/ldap.c:ads_try_connect(126) ads_try_connect: trying ldap server '172.17.5.33' port 389 [2006/06/23 12:38:22, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 172.17.5.33 [2006/06/23 12:38:22, 3] libads/ldap.c:ads_server_info(2542) got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG [2006/06/23 12:38:22, 4] libads/ldap.c:ads_server_info(2548) time offset is 0 seconds [2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(63) ads_dc_name: using server='TIGRDC2' IP=172.17.5.33 [2006/06/23 12:38:22, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for TIGRDC2 [2006/06/23 12:38:22, 3] libsmb/cliconnect.c:cli_start_connection(1389) Connecting to host=TIGRDC2 [2006/06/23 12:38:22, 3] lib/util_sock.c:open_socket_out(870) Connecting to 172.17.5.33 at port 445 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,183) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,183) wrote 183 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 174 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=36480 (0x8E80) smb_vwv[12]= 3332 (0xD04) smb_vwv[13]=58225 (0xE371) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=36480 (0x8E80) smb_vwv[12]= 3332 (0xD04) smb_vwv[13]=58225 (0xE371) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,92) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,92) wrote 92 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 179 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=12288 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 24 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 $W.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23658 smb_uid=12288 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 24 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 $W.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,82) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,82) wrote 82 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 48 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_init_creds(233) cli_init_creds: user domain [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,108) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,108) wrote 108 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 103 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 768 (0x300) smb_vwv[ 3]= 384 (0x180) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[8003]: \NETLOGON auth_type 0, auth_level 0 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. [010] 01 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0048 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_contexts: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c context_id : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001e num_transfer_syntaxes: 01 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 12345678 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1234 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : abcd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : ef 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 01 23 45 67 cf fb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000001 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003c data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 version: 00000002 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32771 (0x8003) smb_bcc=87 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 07 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,158) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,158) wrote 158 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 124 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 07 00 00 H....... .D...... [010] 00 B8 10 B8 10 12 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 07 00 00 H....... .D...... [010] 00 B8 10 B8 10 12 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000007 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 returned 68 bytes. [2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 bind request returned ok. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 0106cb12 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0018 len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a str: \PIPE\lsass. [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 num_results: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002c result : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002e reason : 0000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0034 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0036 data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0038 data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003a data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 version: 00000002 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) cli_rpc_pipe_open_noauth: opened pipe \NETLOGON to machine TIGRDC2 and bound anonymously. [2006/06/23 12:38:22, 4] passdb/secrets.c:secrets_fetch_trust_account_password(282) Using cleartext machine password [2006/06/23 12:38:22, 4] rpc_client/cli_netlogon.c:rpccli_net_req_chal(46) cli_net_req_chal: LSA Request Challenge from IBRIX2 to \\TIGRDC2 [2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_req_chal(679) init_q_req_chal: 679 [2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_req_chal(688) init_q_req_chal: 688 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_q_req_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 undoc_buffer: 00000001 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.T.I.G.R.D.C.2... [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_unistr2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 uni_max_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c uni_str_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0030 buffer : I.B.R.I.X.2... [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 00003e smb_io_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data: a8 9e 5e ea 27 d0 3e 56 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 005e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000046 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 0004 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 94 (0x5E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 94 (0x5E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32771 (0x8003) smb_bcc=109 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 5E 00 00 00 08 00 00 00 46 .......^ .......F [020] 00 00 00 00 00 04 00 01 00 00 00 0A 00 00 00 00 ........ ........ [030] 00 00 00 0A 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G [040] 00 52 00 44 00 43 00 32 00 00 00 07 00 00 00 00 .R.D.C.2 ........ [050] 00 00 00 07 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X [060] 00 32 00 00 00 A8 9E 5E EA 27 D0 3E 56 .2.....^ .'.>V [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,180) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,180) wrote 180 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 92 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 5E 05 00 02 03 10 00 00 00 24 00 00 00 08 00 00 ^....... .$...... [010] 00 0C 00 00 00 00 00 00 00 A0 82 30 3A D1 8D 76 ........ ...0:..v [020] D9 00 00 00 00 ..... [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 5E 05 00 02 03 10 00 00 00 24 00 00 00 08 00 00 ^....... .$...... [010] 00 0C 00 00 00 00 00 00 00 A0 82 30 3A D1 8D 76 ........ ...0:..v [020] D9 00 00 00 00 ..... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0024 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 36, data_len 12, ss_len 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 36 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 returned 24 bytes. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_r_req_chal [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0000 data: a0 82 30 3a d1 8d 76 d9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 0008 status: NT_STATUS_OK [2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(213) creds_client_init: client chal : A89E5EEA27D03E56 [2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(214) creds_client_init: server chal : A082303AD18D76D9 [2006/06/23 12:38:22, 4] libsmb/credentials.c:cred_create_session_key(65) cred_create_session_key [2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(67) clnt_chal_in: A89E5EEA27D03E56 [2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(68) srv_chal_in : A082303AD18D76D9 [2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(69) clnt+srv : 48218F24F85DB52F [2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(70) sess_key_out : 4714D41F4FD74113 [2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(240) creds_client_init: clnt : 9EE13ABFBEDD7D74 [2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(241) creds_client_init: server : 8AF56A6D7449D958 [2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(242) creds_client_init: seed : 9EE13ABFBEDD7D74 [2006/06/23 12:38:22, 4] rpc_client/cli_netlogon.c:rpccli_net_auth2(170) cli_net_auth2: srv:\\TIGRDC2 acct:IBRIX2$ sc:2 mc: IBRIX2 neg: 400701ff [2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_auth_2(800) init_q_auth_2: 800 [2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_log_info(1411) make_log_info 1411 [2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_auth_2(806) init_q_auth_2: 806 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_q_auth_2 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_log_info [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 undoc_buffer: 00000001 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 unistr2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.T.I.G.R.D.C.2... [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_unistr2 unistr2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 uni_max_len: 00000008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c uni_str_len: 00000008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0030 buffer : I.B.R.I.X.2.$... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0040 sec_chan: 0002 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000042 smb_io_unistr2 unistr2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 uni_max_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0048 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c uni_str_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0050 buffer : I.B.R.I.X.2... [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 00005e smb_io_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 005e data: 9e e1 3a bf be dd 7d 74 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000066 net_io_neg_flags [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0068 neg_flags: 400701ff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0084 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000009 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000006c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 000f [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=214 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 132 (0x84) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 132 (0x84) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32771 (0x8003) smb_bcc=147 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 84 00 00 00 09 00 00 00 6C ........ .......l [020] 00 00 00 00 00 0F 00 01 00 00 00 0A 00 00 00 00 ........ ........ [030] 00 00 00 0A 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G [040] 00 52 00 44 00 43 00 32 00 00 00 08 00 00 00 00 .R.D.C.2 ........ [050] 00 00 00 08 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X [060] 00 32 00 24 00 00 00 02 00 00 00 07 00 00 00 00 .2.$.... ........ [070] 00 00 00 07 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X [080] 00 32 00 00 00 9E E1 3A BF BE DD 7D 74 00 00 FF .2.....: ...}t... [090] 01 07 40 ..@ [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,218) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,218) wrote 218 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 96 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 84 05 00 02 03 10 00 00 00 28 00 00 00 09 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 8A F5 6A 6D 74 49 D9 ........ ...jmtI. [020] 58 FF 01 07 40 00 00 00 00 X...@... . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 84 05 00 02 03 10 00 00 00 28 00 00 00 09 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 8A F5 6A 6D 74 49 D9 ........ ...jmtI. [020] 58 FF 01 07 40 00 00 00 00 X...@... . [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0028 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000009 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000010 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 returned 32 bytes. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_r_auth_2 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0000 data: 8a f5 6a 6d 74 49 d9 58 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 net_io_neg_flags [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 neg_flags: 400701ff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 000c status: NT_STATUS_OK [2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_check(259) creds_client_check: credentials check OK. [2006/06/23 12:38:22, 5] rpc_client/cli_netlogon.c:rpccli_netlogon_setup_creds(345) rpccli_netlogon_setup_creds: server TIGRDC2 credential chain established. [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,108) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,108) wrote 108 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 103 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=8 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 1024 (0x400) smb_vwv[ 3]= 384 (0x180) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[8004]: \NETLOGON auth_type 2, auth_level 6 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. [010] 01 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_auth_schannel_neg schannel_neg [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 type1: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 type2: 00000003 [2006/06/23 12:38:22, 6] lib/util.c:dump_data(2058) [000] 54 49 47 52 TIGR [2006/06/23 12:38:22, 6] lib/util.c:dump_data(2058) [000] 49 42 52 49 58 32 IBRIX2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0064 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0014 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_contexts: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c context_id : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001e num_transfer_syntaxes: 01 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 12345678 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1234 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : abcd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : ef 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 01 23 45 67 cf fb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000001 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003c data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 version: 00000002 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_rpc_hdr_auth hdr_auth [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0048 auth_type : 44 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0049 auth_level : 06 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 004a auth_pad_len : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 004b auth_reserved: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c auth_context_id: 00000001 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=182 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 100 (0x64) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32772 (0x8004) smb_bcc=115 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 64 00 14 00 0A 00 00 00 B8 .......d ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 44 06 00 00 01 00 00 00 00 .H`....D ........ [060] 00 00 00 03 00 00 00 54 49 47 52 00 49 42 52 49 .......T IGR.IBRI [070] 58 32 00 X2. [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,186) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,186) wrote 186 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 144 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 0A 00 00 d....... .X...... [010] 00 B8 10 B8 10 13 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 5C 00 01 00 00 00 00 00 00 \lsass.\ ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ [050] 00 00 00 00 00 00 00 00 00 ........ . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 0A 00 00 d....... .X...... [010] 00 B8 10 B8 10 13 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 5C 00 01 00 00 00 00 00 00 \lsass.\ ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ [050] 00 00 00 00 00 00 00 00 00 ........ . [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0058 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000000a [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 88 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 returned 88 bytes. [2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 bind request returned ok. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0058 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 0106cb13 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0018 len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a str: \PIPE\lsass. [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 num_results: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002c result : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002e reason : 0000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 data : 8a885d04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0034 data : 1ceb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0036 data : 11c9 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0038 data : 9f e8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003a data : 08 00 2b 10 48 60 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 version: 00000002 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2509) cli_rpc_pipe_open_schannel_with_key: opened pipe \NETLOGON to machine TIGRDC2 for domain TIGR and bound using schannel. [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,45) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,45) wrote 45 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=10 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2 [2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(82) sequence = 0x449c1900 [2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(84) seed: 9EE13ABFBEDD7D74 [2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(89) seed+seq 9EFAD603BEDD7D74 [2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(93) CLIENT 69D37631FCF9363E [2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(98) seed+seq+1 9FFAD603BEDD7D74 [2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(102) SERVER DA517008DED79485 [2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_reseed(179) cred_reseed: seed 9FFAD603BEDD7D74 [2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_id_info2(1181) init_id_info2: 1181 [2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_logon_id(1590) make_logon_id: 1590 [2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_sam_info(1275) init_sam_info: 1275 [2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_clnt_info2(1505) make_clnt_info: 1505 [2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_clnt_srv(1350) init_clnt_srv: 1350 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_q_sam_logon [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_sam_info [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_clnt_info2 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_clnt_srv [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 undoc_buffer : 00000001 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 unistr2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 0000000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.T.I.G.R.D.C.2... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 undoc_buffer2: 00000001 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_unistr2 unistr2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_max_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 uni_str_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0034 buffer : I.B.R.I.X.2... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 ptr_cred: 00000001 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_cred [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0048 data: 69 d3 76 31 fc f9 36 3e [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_utime [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0050 time: 449c1900 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 ptr_rtn_cred : 00000001 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_cred [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0058 data: 00 00 00 00 00 00 00 00 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000060 smb_io_utime [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0060 time: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0064 logon_level : 0002 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000066 smb_io_sam_info logon_info [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0066 switch_value : 0002 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 net_io_id_info2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0068 ptr_id_info2: 00000001 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 00006c smb_io_unihdr unihdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006c uni_str_len: 0008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006e uni_max_len: 0008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0070 buffer : 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0074 param_ctrl: 00000820 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000078 smb_io_logon_id [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0078 low : 0000dead [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 007c high: 0000beef [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000080 smb_io_unihdr unihdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0080 uni_str_len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0082 uni_max_len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0084 buffer : 00000001 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000088 smb_io_unihdr unihdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0088 uni_str_len: 0018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 008a uni_max_len: 0018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 008c buffer : 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0090 lm_chal: c8 6d e8 54 4d 53 61 f1 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000098 smb_io_strhdr hdr_nt_chal_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0098 str_str_len: 0018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 009a str_max_len: 0018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 009c buffer : 00000001 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000a0 smb_io_strhdr hdr_lm_chal_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a0 str_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a2 str_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a4 buffer : 00000000 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000a8 smb_io_unistr2 uni_domain_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a8 uni_max_len: 00000004 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ac offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b0 uni_str_len: 00000004 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00b4 buffer : T.I.G.R. [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000bc smb_io_unistr2 uni_user_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00bc uni_max_len: 00000006 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c0 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c4 uni_str_len: 00000006 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00c8 buffer : r.a.j.e.e.v. [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000d4 smb_io_unistr2 uni_wksta_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d4 uni_max_len: 0000000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d8 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00dc uni_str_len: 0000000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00e0 buffer : \.\.K.R.E.A.P.E.R.-.X.P. [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000f8 smb_io_string2 nt_chal_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f8 str_max_len: 00000018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00fc offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0100 str_str_len: 00000018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_string2(1064) 0104 buffer : ....5..]".:....D.wT..... [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 00011c smb_io_string2 - NULL lm_chal_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 011c validation_level: 0003 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0160 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0020 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000000b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000011e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 0002 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000138 smb_io_rpc_hdr_auth hdr_auth [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0138 auth_type : 44 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0139 auth_level : 06 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 013a auth_pad_len : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 013b auth_reserved: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 013c auth_context_id: 00000001 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:add_schannel_auth_footer(1357) add_schannel_auth_footer: SCHANNEL seq_num=0 [2006/06/23 12:38:22, 10] rpc_parse/parse_prs.c:schannel_encode(1571) SCHANNEL: schannel_encode seq_num=0 data_len=288 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000140 smb_io_rpc_auth_schannel_chk [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0140 sig : 77 00 7a 00 ff ff 00 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0148 seq_num: 86 d4 77 38 42 04 0f d7 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0150 packet_digest: 21 a2 0a 50 c8 3f 19 f0 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0158 confounder: e5 4e 02 11 d4 ee ea e7 [2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=434 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=11 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 352 (0x160) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 352 (0x160) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32772 (0x8004) smb_bcc=367 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 60 01 20 00 0B 00 00 00 1E .......` . ...... [020] 01 00 00 00 00 02 00 B6 D5 2B A1 7A 29 50 9C 51 ........ .+.z)P.Q [030] B4 46 39 2E CF 21 E6 90 2D 90 30 C4 83 67 68 B6 .F9..!.. -.0..gh. [040] 06 7C 30 01 CA 5D E2 6B 99 83 CA A9 C1 F5 CD CF .|0..].k ........ [050] 26 6D 75 E7 DC 02 38 B8 52 D5 51 FF 5A E6 6F 54 &mu...8. R.Q.Z.oT [060] C4 71 48 31 3D 01 BC 25 ED 20 51 A6 0D C6 49 0E .qH1=..% . Q...I. [070] 37 57 9F 8B C3 85 33 71 5E A9 75 A1 9D 5E 49 D5 7W....3q ^.u..^I. [080] 7F 12 8B 00 BF 5D BF AB DD FD C4 82 DA C6 83 79 .....].. .......y [090] 6F EE FD 26 EB 41 F1 62 9D E9 58 7D 27 03 52 00 o..&.A.b ..X}'.R. [0A0] 4D 91 55 6B AB 33 FC 61 77 89 C4 C6 0A F9 95 0E M.Uk.3.a w....... [0B0] 48 DC 4D F9 D5 68 45 E3 DC 04 F4 86 1F 3D 1D 44 H.M..hE. .....=.D [0C0] 55 D5 0C 8F CF 4E EF 89 32 A1 FF 33 77 E9 93 CC U....N.. 2..3w... [0D0] 77 4C AC 9B 03 28 43 E1 4A 08 C2 8A 52 D7 66 45 wL...(C. J...R.fE [0E0] 15 0C A3 58 B7 B7 95 60 08 12 35 DA 68 E2 9C 3E ...X...` ..5.h..> [0F0] 2F E3 15 1F 1C 66 9F 38 1E 38 53 4C 4B 98 49 FA /....f.8 .8SLK.I. [100] 47 23 6A 3B D4 3F 7A 4D 5F 35 9C 94 6E 43 9B DB G#j;.?zM _5..nC.. [110] 12 5A E4 5D D1 90 61 6F 5D 9A 2A C6 C8 59 9B 5C .Z.]..ao ].*..Y.\ [120] E4 22 EA E2 C5 13 15 D3 A1 37 D9 93 B6 31 28 4F ."...... .7...1(O [130] 26 E6 55 9A CA 7D 26 6D 35 F1 A7 80 43 F6 FC 67 &.U..}&m 5...C..g [140] 6D 84 7D 93 92 29 A2 44 06 02 00 01 00 00 00 77 m.}..).D .......w [150] 00 7A 00 FF FF 00 00 86 D4 77 38 42 04 0F D7 21 .z...... .w8B...! [160] A2 0A 50 C8 3F 19 F0 E5 4E 02 11 D4 EE EA E7 ..P.?... N...... [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,438) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,438) wrote 438 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1144 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=1144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1088 (0x440) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1088 (0x440) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1089 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 60 05 00 02 03 10 00 00 00 40 04 20 00 0B 00 00 `....... .@. .... [010] 00 F8 03 00 00 00 00 00 00 74 38 2A A1 3D 3F F1 ........ .t8*.=?. [020] 05 A3 57 86 50 E5 D6 19 1D A5 DC 37 45 A7 4E FC ..W.P... ...7E.N. [030] 1C 53 A6 AE 0C 76 6B 25 28 EF 34 EB 34 8F 08 72 .S...vk% (.4.4..r [040] 25 0C DE A6 62 EC 1A 18 5B B0 C8 CC 75 C5 D8 92 %...b... [...u... [050] C2 41 B1 D4 58 22 82 15 5E 0C 09 39 B1 50 27 95 .A..X".. ^..9.P'. [060] 8E E0 52 54 38 37 D7 6C B3 D0 8B 0A 95 6A DC 08 ..RT87.l .....j.. [070] 61 94 D6 8D B5 2B 1F 76 0E 52 37 B0 19 BF 7D F5 a....+.v .R7...}. [080] 33 1B B1 27 97 F3 04 C4 9F DC 03 65 6F 49 48 F0 3..'.... ...eoIH. [090] 12 D1 66 4C 34 54 28 C2 51 92 93 66 18 E8 AC E4 ..fL4T(. Q..f.... [0A0] 11 D0 FD 27 3B D1 F8 6A 06 E3 2C F9 3A DB A6 FE ...';..j ..,.:... [0B0] 78 4F F0 8F AB 7D 42 C5 3E 11 2D 4B F7 68 71 7D xO...}B. >.-K.hq} [0C0] 01 B3 46 46 87 B5 DD A4 A9 BF A0 30 9C A0 CE 8F ..FF.... ...0.... [0D0] 02 81 E6 C1 A6 DA 0E 50 52 71 63 DB 27 08 2E 78 .......P Rqc.'..x [0E0] 17 5B F5 E9 39 07 42 3F E1 1B 92 9E 0A E6 2F AA .[..9.B? ....../. [0F0] D6 9C 07 22 1E D8 38 A7 9A 8D F0 EC 5F 64 68 18 ..."..8. ...._dh. [100] 08 95 DF 67 21 A0 5F 78 01 B2 F3 C0 50 7D B9 AC ...g!._x ....P}.. [110] 9B F7 9F 45 83 A9 CB 49 C9 07 5C 25 05 51 D1 C1 ...E...I ..\%.Q.. [120] 12 DA 78 96 76 7E 7C C2 D9 F1 8D 76 A7 0C 02 99 ..x.v~|. ...v.... [130] 86 16 15 8F 22 38 7F 6B E1 D8 2E 04 58 D5 6D 09 ...."8.k ....X.m. [140] 98 26 39 AB 32 4A BC CA 93 D5 EA B0 8C D2 D6 C7 .&9.2J.. ........ [150] 38 1A F2 19 A0 29 2E 5C C5 D6 13 34 2B CD E5 B2 8....).\ ...4+... [160] 41 33 C0 E3 5E 6F 06 BD 00 3D F6 43 8E D5 AF AF A3..^o.. .=.C.... [170] 79 EF 51 98 14 01 27 10 B0 DD 4E 51 D1 B8 07 AD y.Q...'. ..NQ.... [180] 3D E1 B7 B3 AF 65 65 46 51 82 F5 7D 88 12 C4 F7 =....eeF Q..}.... [190] AA 9E E7 A0 B1 04 D0 42 D1 C6 3C 84 73 F0 28 7B .......B ..<.s.({ [1A0] FE BA AC 15 0D AA 6C 34 69 8A F6 FA 2A AF 1F D7 ......l4 i...*... [1B0] 82 AC 53 D4 A5 F8 2F D3 73 2E 4F 8C 05 EA 96 3C ..S.../. s.O....< [1C0] 3D BB 19 BD CD 97 08 8F 28 7C AC EE 7A CC 13 92 =....... (|..z... [1D0] 3F 7D 7A 8E 4A 94 21 7E F4 CA EC 7B 53 37 91 B3 ?}z.J.!~ ...{S7.. [1E0] 72 DF D6 48 58 93 6A 91 51 D7 D6 26 38 50 E2 5A r..HX.j. Q..&8P.Z [1F0] FB B6 C1 BC AB A2 71 4F 9D 10 BF 31 B5 BE E2 1F ......qO ...1.... [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=1144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1088 (0x440) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1088 (0x440) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1089 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 60 05 00 02 03 10 00 00 00 40 04 20 00 0B 00 00 `....... .@. .... [010] 00 F8 03 00 00 00 00 00 00 74 38 2A A1 3D 3F F1 ........ .t8*.=?. [020] 05 A3 57 86 50 E5 D6 19 1D A5 DC 37 45 A7 4E FC ..W.P... ...7E.N. [030] 1C 53 A6 AE 0C 76 6B 25 28 EF 34 EB 34 8F 08 72 .S...vk% (.4.4..r [040] 25 0C DE A6 62 EC 1A 18 5B B0 C8 CC 75 C5 D8 92 %...b... [...u... [050] C2 41 B1 D4 58 22 82 15 5E 0C 09 39 B1 50 27 95 .A..X".. ^..9.P'. [060] 8E E0 52 54 38 37 D7 6C B3 D0 8B 0A 95 6A DC 08 ..RT87.l .....j.. [070] 61 94 D6 8D B5 2B 1F 76 0E 52 37 B0 19 BF 7D F5 a....+.v .R7...}. [080] 33 1B B1 27 97 F3 04 C4 9F DC 03 65 6F 49 48 F0 3..'.... ...eoIH. [090] 12 D1 66 4C 34 54 28 C2 51 92 93 66 18 E8 AC E4 ..fL4T(. Q..f.... [0A0] 11 D0 FD 27 3B D1 F8 6A 06 E3 2C F9 3A DB A6 FE ...';..j ..,.:... [0B0] 78 4F F0 8F AB 7D 42 C5 3E 11 2D 4B F7 68 71 7D xO...}B. >.-K.hq} [0C0] 01 B3 46 46 87 B5 DD A4 A9 BF A0 30 9C A0 CE 8F ..FF.... ...0.... [0D0] 02 81 E6 C1 A6 DA 0E 50 52 71 63 DB 27 08 2E 78 .......P Rqc.'..x [0E0] 17 5B F5 E9 39 07 42 3F E1 1B 92 9E 0A E6 2F AA .[..9.B? ....../. [0F0] D6 9C 07 22 1E D8 38 A7 9A 8D F0 EC 5F 64 68 18 ..."..8. ...._dh. [100] 08 95 DF 67 21 A0 5F 78 01 B2 F3 C0 50 7D B9 AC ...g!._x ....P}.. [110] 9B F7 9F 45 83 A9 CB 49 C9 07 5C 25 05 51 D1 C1 ...E...I ..\%.Q.. [120] 12 DA 78 96 76 7E 7C C2 D9 F1 8D 76 A7 0C 02 99 ..x.v~|. ...v.... [130] 86 16 15 8F 22 38 7F 6B E1 D8 2E 04 58 D5 6D 09 ...."8.k ....X.m. [140] 98 26 39 AB 32 4A BC CA 93 D5 EA B0 8C D2 D6 C7 .&9.2J.. ........ [150] 38 1A F2 19 A0 29 2E 5C C5 D6 13 34 2B CD E5 B2 8....).\ ...4+... [160] 41 33 C0 E3 5E 6F 06 BD 00 3D F6 43 8E D5 AF AF A3..^o.. .=.C.... [170] 79 EF 51 98 14 01 27 10 B0 DD 4E 51 D1 B8 07 AD y.Q...'. ..NQ.... [180] 3D E1 B7 B3 AF 65 65 46 51 82 F5 7D 88 12 C4 F7 =....eeF Q..}.... [190] AA 9E E7 A0 B1 04 D0 42 D1 C6 3C 84 73 F0 28 7B .......B ..<.s.({ [1A0] FE BA AC 15 0D AA 6C 34 69 8A F6 FA 2A AF 1F D7 ......l4 i...*... [1B0] 82 AC 53 D4 A5 F8 2F D3 73 2E 4F 8C 05 EA 96 3C ..S.../. s.O....< [1C0] 3D BB 19 BD CD 97 08 8F 28 7C AC EE 7A CC 13 92 =....... (|..z... [1D0] 3F 7D 7A 8E 4A 94 21 7E F4 CA EC 7B 53 37 91 B3 ?}z.J.!~ ...{S7.. [1E0] 72 DF D6 48 58 93 6A 91 51 D7 D6 26 38 50 E2 5A r..HX.j. Q..&8P.Z [1F0] FB B6 C1 BC AB A2 71 4F 9D 10 BF 31 B5 BE E2 1F ......qO ...1.... [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0440 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0020 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000000b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 000003f8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000418 smb_io_rpc_hdr_auth hdr_auth [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0418 auth_type : 44 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0419 auth_level : 06 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 041a auth_pad_len : 08 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 041b auth_reserved: 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 041c auth_context_id: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000420 smb_io_rpc_auth_schannel_chk [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0420 sig : 77 00 7a 00 ff ff 00 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0428 seq_num: d2 7f 7c d6 45 3d 79 6c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0430 packet_digest: 37 f3 d0 45 d5 51 e3 07 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0438 confounder: 74 6b b2 24 43 fb 22 89 [2006/06/23 12:38:22, 10] rpc_parse/parse_prs.c:schannel_decode(1648) SCHANNEL: schannel_decode seq_num=1 data_len=1024 [2006/06/23 12:38:22, 10] rpc_parse/parse_prs.c:schannel_decode(1668) SCHANNEL: schannel_decode seq_num=1 data_len=1024 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 1088, data_len 1016, ss_len 8 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 1088 at offset 0 [2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 returned 2032 bytes. [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_r_sam_logon [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 buffer_creds: 00020000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_cred [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_chal [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0004 data: da 51 70 08 de d7 94 85 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 00000c smb_io_utime [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c time: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 switch_value: 0003 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 net_io_user_info3 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 ptr_user_info : 00020004 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_time logon time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 low : d2ca8713 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c high: 01c696dc [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_time logoff time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 low : ffffffff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 high: 7fffffff [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_time kickoff time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 low : ffffffff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c high: 7fffffff [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_time last set time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 low : 09fac924 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 high: 01c6868d [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_time can change time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0038 low : 09fac924 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 003c high: 01c6868d [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000040 smb_io_time must change time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 low : ffffffff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 high: 7fffffff [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_unihdr hdr_user_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0048 uni_str_len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a uni_max_len: 000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c buffer : 00020008 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_unihdr hdr_full_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0050 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0052 uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 buffer : 00000000 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_unihdr hdr_logon_script [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0058 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 005a uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 005c buffer : 00000000 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 smb_io_unihdr hdr_profile_path [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0060 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 buffer : 00000000 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_unihdr hdr_home_dir [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0068 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006a uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 006c buffer : 00000000 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000070 smb_io_unihdr hdr_dir_drive [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0070 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0072 uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0074 buffer : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0078 logon_count : 08c3 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 007a bad_pw_count : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 007c user_rid : 00000c2a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0080 group_rid : 00000201 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0084 num_groups : 0000000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0088 buffer_groups : 0002000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 008c user_flgs : 00000120 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0090 user_sess_key: fd 24 b7 48 99 3d f9 3a a0 c6 b3 b7 9f f7 e1 1c [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000a0 smb_io_unihdr hdr_logon_srv [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a0 uni_str_len: 000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a2 uni_max_len: 0010 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a4 buffer : 00020010 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000a8 smb_io_unihdr hdr_logon_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a8 uni_str_len: 0008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00aa uni_max_len: 000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ac buffer : 00020014 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b0 buffer_dom_id : 00020018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 00b4 lm_sess_key: f3 14 5f 27 96 6a 99 df [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00bc acct_flags : 00000210 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c0 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c4 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c8 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00cc unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d0 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d4 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d8 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00dc num_other_sids: 0000000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00e0 buffer_other_sids: 0002001c [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000e4 smb_io_unistr2 uni_user_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00e4 uni_max_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00e8 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ec uni_str_len: 00000006 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00f0 buffer : r.a.j.e.e.v. [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_full_name [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_logon_script [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_profile_path [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_home_dir [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_dir_drive [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00fc num_groups2 : 0000000e [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000100 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0100 g_rid: 0000128a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0104 attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000108 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0108 g_rid: 0000053c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 010c attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000110 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0110 g_rid: 00001bdb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0114 attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000118 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0118 g_rid: 00000d53 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 011c attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000120 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0120 g_rid: 00000fa7 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0124 attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000128 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0128 g_rid: 00000fa8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 012c attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000130 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0130 g_rid: 0000169a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0134 attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000138 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0138 g_rid: 0000055e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 013c attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000140 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0140 g_rid: 00000555 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0144 attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000148 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0148 g_rid: 00000540 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 014c attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000150 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0150 g_rid: 00000fdd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0154 attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000158 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0158 g_rid: 00000201 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 015c attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000160 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0160 g_rid: 0000055c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0164 attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000168 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0168 g_rid: 0000051b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 016c attr : 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000170 smb_io_unistr2 uni_logon_srv [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0170 uni_max_len: 00000008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0174 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0178 uni_str_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 017c buffer : T.I.G.R.D.C.2. [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 00018a smb_io_unistr2 uni_logon_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 018c uni_max_len: 00000005 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0190 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0194 uni_str_len: 00000004 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0198 buffer : T.I.G.R. [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0001a0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01a0 num_auths: 00000004 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0001a4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a5 num_auths : 04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01aa id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01ab id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 01ac sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01bc num_other_sids: 0000000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c0 sid_ptr: 00020020 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c8 sid_ptr: 00020024 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01cc attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d0 sid_ptr: 00020028 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d8 sid_ptr: 0002002c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01dc attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e0 sid_ptr: 00020030 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e8 sid_ptr: 00020034 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01ec attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f0 sid_ptr: 00020038 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f8 sid_ptr: 0002003c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01fc attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0200 sid_ptr: 00020040 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0204 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0208 sid_ptr: 00020044 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 020c attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0210 sid_ptr: 00020048 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0214 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0218 sid_ptr: 0002004c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 021c attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0220 sid_ptr: 00020050 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0224 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0228 sid_ptr: 00020054 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 022c attribute: 00000007 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000230 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0230 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000234 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0234 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0235 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0236 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0237 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0238 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0239 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 023a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 023b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 023c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000250 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0250 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000254 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0254 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0255 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0256 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0257 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0258 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0259 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 025a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 025b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 025c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000270 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0270 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000274 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0274 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0275 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0276 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0277 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0278 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0279 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 027a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 027b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 027c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000290 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0290 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000294 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0294 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0295 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0296 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0297 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0298 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0299 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 029a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 029b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 029c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002b0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02b0 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0002b4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ba id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02bb id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02bc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002d0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02d0 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0002d4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02da id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02db id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002f0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02f0 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0002f4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02fa id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02fb id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02fc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000310 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0310 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000314 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0314 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0315 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0316 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0317 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0318 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0319 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 031a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 031b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 031c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000330 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0330 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000334 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0334 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0335 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0336 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0337 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0338 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0339 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 033a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 033b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 033c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000350 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0350 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000354 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0354 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0355 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0356 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0357 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0358 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0359 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 035a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 035b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 035c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000370 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0370 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000374 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0374 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0375 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0376 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0377 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0378 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0379 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 037a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 037b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 037c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000390 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0390 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 000394 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0394 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0395 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0396 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0397 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0398 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0399 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 039a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 039b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 039c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003b0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03b0 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0003b4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03ba id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03bb id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03bc sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003d0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03d0 num_auths: 00000005 [2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84) 0003d4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03da id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03db id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03f0 auth_resp : 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 03f4 status : NT_STATUS_OK [2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_check(259) creds_client_check: credentials check OK. [2006/06/23 12:38:22, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for TIGRDC2 [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user TIGR\rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is tigr\rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(242) Trying _Get_Pwnam(), username as given is TIGR\rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(252) Trying _Get_Pwnam(), username as uppercase is TIGR\RAJEEV [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(261) Checking combinations of 0 uppercase letters in tigr\rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals didn't find user [TIGR\rajeev]! [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [rajeev]! [2006/06/23 12:38:22, 5] auth/auth_util.c:fill_sam_account(1118) fill_sam_account: located username was [rajeev] [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username rajeev, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name Rajeev Karamchedu, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833) pdb_set_unix_homedir: setting home dir /home/rajeev, was NULL [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain IBRIX2, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036 [2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036 from rid 4036 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081 [2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081 from rid 1081 [2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359) Home server: ibrix2 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\ibrix2\rajeev\profile, was [2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359) Home server: ibrix2 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\ibrix2\rajeev, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive , was NULL [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script , was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) pdb_set_nt_username: setting nt username rajeev, was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username rajeev, was rajeev [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain TIGR, was IBRIX2 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-2867130070-3872911017-3508780997-3114 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-2867130070-3872911017-3508780997-513 [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name , was Rajeev Karamchedu [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script , was [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path , was \\ibrix2\rajeev\profile [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir , was \\ibrix2\rajeev [2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive , was [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 10] lib/system_smbd.c:sys_getgrouplist(167) sys_getgrouplist: user [rajeev] [2006/06/23 12:38:22, 10] lib/system_smbd.c:sys_getgrouplist(176) sys_getgrouplist(): disabled winbindd for group lookup [user == rajeev] [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 8] lib/system_smbd.c:remove_duplicate_gids(49) remove_duplicate_gids: Enter 14 gids [2006/06/23 12:38:22, 8] lib/system_smbd.c:remove_duplicate_gids(67) remove_duplicate_gids: Exit 13 gids [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081 [2006/06/23 12:38:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267) fetch sid from gid cache 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051 [2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 10] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:22, 10] libsmb/samlogon_cache.c:netsamlogon_cache_store(134) netsamlogon_cache_store: SID [S-1-5-21-2867130070-3872911017-3508780997-3114] [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 timestamp: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84) 000004 net_io_user_info3 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 ptr_user_info : 00020004 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 smb_io_time logon time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 low : d2ca8713 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c high: 01c696dc [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_time logoff time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 low : ffffffff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 high: 7fffffff [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_time kickoff time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 low : ffffffff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c high: 7fffffff [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_time last set time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 low : 09fac924 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 high: 01c6868d [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_time can change time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 low : 09fac924 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c high: 01c6868d [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_time must change time [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 low : ffffffff [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 high: 7fffffff [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_unihdr hdr_user_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 uni_str_len: 000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a uni_max_len: 000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 003c buffer : 00020008 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000040 smb_io_unihdr hdr_full_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0040 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0042 uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 buffer : 00000000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_unihdr hdr_logon_script [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0048 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c buffer : 00000000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_unihdr hdr_profile_path [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0050 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0052 uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 buffer : 00000000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_unihdr hdr_home_dir [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0058 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 005a uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 005c buffer : 00000000 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000060 smb_io_unihdr hdr_dir_drive [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0060 uni_str_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 uni_max_len: 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 buffer : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0068 logon_count : 08c3 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006a bad_pw_count : 0000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 006c user_rid : 00000c2a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0070 group_rid : 00000201 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0074 num_groups : 0000000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0078 buffer_groups : 0002000c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 007c user_flgs : 00000120 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0080 user_sess_key: 44 1e ea fc 4e 56 5c 63 cb e2 35 70 2d 85 ad e6 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000090 smb_io_unihdr hdr_logon_srv [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0090 uni_str_len: 000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0092 uni_max_len: 0010 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0094 buffer : 00020010 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000098 smb_io_unihdr hdr_logon_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0098 uni_str_len: 0008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674) 009a uni_max_len: 000a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 009c buffer : 00020014 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a0 buffer_dom_id : 00020018 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 00a4 lm_sess_key: 4a 2e 02 93 41 01 3c 86 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ac acct_flags : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b0 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b4 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b8 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00bc unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c0 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c4 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c8 unkown: 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00cc num_other_sids: 0000000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d0 buffer_other_sids: 0002001c [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000d4 smb_io_unistr2 uni_user_name [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d4 uni_max_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d8 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00dc uni_str_len: 00000006 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00e0 buffer : r.a.j.e.e.v. [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_full_name [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_logon_script [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_profile_path [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_home_dir [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_dir_drive [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ec num_groups2 : 0000000e [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000f0 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f0 g_rid: 0000128a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f4 attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000f8 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f8 g_rid: 0000053c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00fc attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000100 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0100 g_rid: 00001bdb [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0104 attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000108 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0108 g_rid: 00000d53 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 010c attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000110 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0110 g_rid: 00000fa7 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0114 attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000118 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0118 g_rid: 00000fa8 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 011c attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000120 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0120 g_rid: 0000169a [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0124 attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000128 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0128 g_rid: 0000055e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 012c attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000130 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0130 g_rid: 00000555 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0134 attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000138 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0138 g_rid: 00000540 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 013c attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000140 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0140 g_rid: 00000fdd [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0144 attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000148 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0148 g_rid: 00000201 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 014c attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000150 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0150 g_rid: 0000055c [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0154 attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000158 smb_io_gid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0158 g_rid: 0000051b [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 015c attr : 00000007 [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000160 smb_io_unistr2 uni_logon_srv [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0160 uni_max_len: 00000008 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0164 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0168 uni_str_len: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 016c buffer : T.I.G.R.D.C.2. [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 00017a smb_io_unistr2 uni_logon_dom [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 017c uni_max_len: 00000005 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0180 offset : 00000000 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0184 uni_str_len: 00000004 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0188 buffer : T.I.G.R. [2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84) 000190 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0190 num_auths: 00000004 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000194 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0194 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0195 num_auths : 04 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0196 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0197 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0198 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0199 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 019a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 019b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 019c sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01ac num_other_sids: 0000000e [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01b0 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01b4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01b8 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01bc attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c0 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c8 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01cc attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d0 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d8 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01dc attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e0 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e8 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01ec attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f0 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f4 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f8 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01fc attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0200 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0204 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0208 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 020c attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0210 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0214 attribute: 00000007 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0218 sid_ptr: 00000001 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 021c attribute: 00000007 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000220 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0220 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000224 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0224 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0225 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0226 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0227 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0228 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0229 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 022a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 022b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 022c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000240 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0240 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000244 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0244 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0245 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0246 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0247 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0248 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0249 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 024a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 024b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 024c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000260 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0260 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000264 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0264 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0265 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0266 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0267 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0268 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0269 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 026a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 026b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 026c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000280 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0280 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000284 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0284 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0285 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0286 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0287 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0288 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0289 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 028a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 028b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 028c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0002a0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02a0 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002a4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02aa id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ab id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02ac sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0002c0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02c0 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002c4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ca id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02cb id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0002e0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02e0 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002e4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ea id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02eb id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02ec sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000300 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0300 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000304 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0304 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0305 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0306 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0307 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0308 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0309 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 030a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 030b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 030c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000320 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0320 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000324 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0324 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0325 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0326 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0327 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0328 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0329 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 032a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 032b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 032c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000340 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0340 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000344 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0344 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0345 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0346 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0347 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0348 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0349 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 034a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 034b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 034c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000360 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0360 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000364 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0364 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0365 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0366 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0367 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0368 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0369 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 036a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 036b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 036c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 000380 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0380 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 000384 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0384 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0385 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0386 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0387 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0388 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0389 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 038a id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 038b id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 038c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0003a0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03a0 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003a4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03aa id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03ab id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03ac sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed [2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84) 0003c0 smb_io_dom_sid2 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03c0 num_auths: 00000005 [2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003c4 smb_io_dom_sid sid [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c4 sid_rev_num: 01 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c5 num_auths : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c6 id_auth[0] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c7 id_auth[1] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c8 id_auth[2] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c9 id_auth[3] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03ca id_auth[4] : 00 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03cb id_auth[5] : 05 [2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,45) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,45) wrote 45 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=12 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2 [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,39) [2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,39) wrote 39 [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=8192 smb_pid=23658 smb_uid=12288 smb_mid=13 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: winbind authentication for user [rajeev] succeeded [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth.c:check_ntlm_password(294) check_ntlm_password: PAM Account for user [rajeev] succeeded [2006/06/23 12:38:22, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: authentication for user [rajeev] -> [rajeev] -> [rajeev] succeeded [2006/06/23 12:38:22, 5] auth/auth_util.c:free_user_info(1485) attempting to free (and zero) a user_info structure [2006/06/23 12:38:22, 10] auth/auth_util.c:free_user_info(1488) structure was created for rajeev [2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(120) Got NT session key of length 16 [2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(127) Got LM session key of length 8 [2006/06/23 12:38:22, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(728) ntlmssp_server_auth: Created NTLM2 session key. [2006/06/23 12:38:22, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0x60088235 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_SEAL NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 103 [2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(255) register_vuid: (1518,40) rajeev rajeev TIGR guest=0 [2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(257) User name: rajeev Real name: [2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(276) UNIX uid 1518 is UNIX user rajeev, and will be vuid 103 [2006/06/23 12:38:22, 7] param/loadparm.c:lp_servicenumber(4343) lp_servicenumber: couldn't find rajeev [2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(305) Adding homes service for user 'rajeev' using home directory: '/home/rajeev' [2006/06/23 12:38:22, 7] param/loadparm.c:lp_servicenumber(4343) lp_servicenumber: couldn't find homes [2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=98 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=3776 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=55 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 32 00 00 00 54 00 49 ...0...2 .2...T.I [030] 00 47 00 52 00 00 00 .G.R... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 7 of length 92 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=88 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=3840 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=45 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 .\.\.1.7 .2...1.7 [010] 00 2E 00 34 00 39 00 2E 00 31 00 32 00 5C 00 44 ...4.9.. .1.2.\.D [020] 00 46 00 53 00 00 00 3F 3F 3F 3F 3F 00 .F.S...? ????. [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtconX (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 4] smbd/reply.c:reply_tcon_and_X(660) Client requested device type [?????] for share [DFS] [2006/06/23 12:38:22, 5] smbd/service.c:make_connection(860) making a connection to 'normal' service dfs [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is rajeev [2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98) Got rajeev from pwnam_cache [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [rajeev]! [2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(488) Connect path is '/export/dfsroot' for service [dfs] [2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for dfs [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216) Initialising default vfs hooks [2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170) claiming dfs 0 [2006/06/23 12:38:22, 10] smbd/uid.c:is_share_read_only_for_user(127) is_share_read_only_for_user: share dfs is read-only for unix user rajeev [2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for dfs [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:22, 1] smbd/service.c:make_connection_snum(693) kreaper-xp (172.17.134.118) connect to service dfs initially as user rajeev (uid=1518, gid=40) (pid 23658) [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 2] smbd/reply.c:reply_tcon_and_X(703) Serving dfs as a Dfs root [2006/06/23 12:38:22, 3] smbd/reply.c:reply_tcon_and_X(708) tconX service=DFS [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=54 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=3840 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3 (0x3) smb_bcc=13 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 120 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x78 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 8 of length 124 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=120 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=3904 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8704 (0x2200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=37 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E .\.1.7.2 ...1.7.. [010] 00 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 .4.9...1 .2.\.d.f [020] 00 73 00 00 00 .s... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /export/dfsroot [2006/06/23 12:38:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91) temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101) parse_processed_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431) dfs_redirect: Not redirecting 172.17.49.12/dfs. [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Path converted to non-dfs path [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:22, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:38:22, 5] smbd/files.c:file_new(128) allocated file structure 1860, fnum = 5956 (1 used) [2006/06/23 12:38:22, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:38:22, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5956, open name = . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=3904 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=17408 (0x4400) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 9 of length 76 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=3968 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 44 17 EE 03 ...D... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5956) level=1006 call=7 total_data=0 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=3968 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 70 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x46 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 10 of length 74 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4032 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 05 01 ..... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfsinfo(2136) call_trans2qfsinfo: level = 261 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4032 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T [010] 00 46 00 53 00 .F.S. [2006/06/23 12:38:22, 4] smbd/trans2.c:call_trans2qfsinfo(2465) SMBtrans2 info_level = 261 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 11 of length 45 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=4096 smt_wct=3 smb_vwv[ 0]= 5956 (0x1744) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/reply.c:reply_close(3257) close directory fnum=5956 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 5] smbd/files.c:file_free(450) freed files structure 5956 (0 used) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=4096 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 120 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x78 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 12 of length 124 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=120 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4160 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8704 (0x2200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8256 (0x2040) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=37 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E .\.1.7.2 ...1.7.. [010] 00 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 .4.9...1 .2.\.d.f [020] 00 73 00 00 00 .s... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0 [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91) temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101) parse_processed_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431) dfs_redirect: Not redirecting 172.17.49.12/dfs. [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Path converted to non-dfs path [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:22, 3] smbd/dosmode.c:unix_mode(121) unix_mode(.) returning 0744 [2006/06/23 12:38:22, 10] smbd/open.c:open_file_ntcreate(1091) open_file_ntcreate: fname=., dos_attrs=0x0 access_mask=0x80 share_access=0x7 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 10] smbd/open.c:open_file_ntcreate(1259) open_file_ntcreate: fname=., after mapping access_mask=0x80 [2006/06/23 12:38:22, 5] smbd/files.c:file_new(128) allocated file structure 1861, fnum = 5957 (1 used) [2006/06/23 12:38:22, 4] smbd/open.c:open_file_ntcreate(1490) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/23 12:38:22, 5] smbd/files.c:file_free(450) freed files structure 5957 (0 used) [2006/06/23 12:38:22, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x80, share_access = 0x7 create_options = 0x204000, create_disposition = 0x1 [2006/06/23 12:38:22, 5] smbd/files.c:file_new(128) allocated file structure 1862, fnum = 5958 (1 used) [2006/06/23 12:38:22, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:38:22, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5958, open name = . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4160 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=17920 (0x4600) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 13 of length 76 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4224 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 46 17 EE 03 ...F... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5958) level=1006 call=7 total_data=0 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4224 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 14 of length 76 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4288 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 46 17 EC 03 ...F... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5958) level=1004 call=7 total_data=0 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3108) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2006/06/23 12:38:22, 5] smbd/trans2.c:call_trans2qfilepathinfo(3118) SMB_QFBI - create: Thu Jun 22 10:32:53 2006 access: Fri Jun 23 12:37:32 2006 write: Thu Jun 22 10:32:53 2006 change: Thu Jun 22 10:32:53 2006 mode: 10 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4288 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 80 D8 B3 BE 08 96 C6 01 00 6E F2 ........ ......n. [010] 52 E3 96 C6 01 80 D8 B3 BE 08 96 C6 01 80 D8 B3 R....... ........ [020] BE 08 96 C6 01 10 00 00 00 00 00 00 00 ........ ..... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 15 of length 45 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=4352 smt_wct=3 smb_vwv[ 0]= 5958 (0x1746) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/reply.c:reply_close(3257) close directory fnum=5958 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 5] smbd/files.c:file_free(450) freed files structure 5958 (0 used) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=4352 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 120 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x78 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 16 of length 124 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=120 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4416 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8704 (0x2200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=37 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E .\.1.7.2 ...1.7.. [010] 00 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 .4.9...1 .2.\.d.f [020] 00 73 00 00 00 .s... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91) temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101) parse_processed_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431) dfs_redirect: Not redirecting 172.17.49.12/dfs. [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Path converted to non-dfs path [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:22, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:38:22, 5] smbd/files.c:file_new(128) allocated file structure 1863, fnum = 5959 (1 used) [2006/06/23 12:38:22, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:38:22, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5959, open name = . [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4416 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=18176 (0x4700) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 17 of length 76 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4480 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 47 17 EE 03 ...G... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5959) level=1006 call=7 total_data=0 [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4480 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 136 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x88 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 18 of length 140 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=136 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4544 smt_wct=15 smb_vwv[ 0]= 68 (0x44) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 68 (0x44) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=71 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 16 00 56 05 16 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E 00 34 .1.7.2.. .1.7...4 [020] 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 00 73 .9...1.2 .\.d.f.s [030] 00 5C 00 53 00 43 00 52 00 41 00 54 00 43 00 48 .\.S.C.R .A.T.C.H [040] 00 22 00 2A 00 00 00 .".*... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2findfirst(1632) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91) temp in parse_processed_dfs_path: .172.17.49.12/dfs/SCRATCH"*. after trimming \'s [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101) parse_processed_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(113) parse_processed_dfs_path: servicename: dfs [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(123) parse_processed_dfs_path: rest of the path: SCRATCH"* [2006/06/23 12:38:22, 10] smbd/msdfs.c:resolve_dfs_path(336) resolve_dfs_path: Conn path = /export/dfsroot req_path = SCRATCH"* [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "SCRATCH"*" [2006/06/23 12:38:22, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [SCRATCH"*] [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = SCRATCH"*, dirpath = , start = SCRATCH"* [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(335) New file SCRATCH"* [2006/06/23 12:38:22, 5] smbd/msdfs.c:is_msdfs_link(268) is_msdfs_link: SCRATCH"* does not exist. [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431) dfs_redirect: Not redirecting 172.17.49.12/dfs/SCRATCH"*. [2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Path converted to non-dfs path SCRATCH"* [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "SCRATCH"*" [2006/06/23 12:38:22, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [SCRATCH"*] [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = SCRATCH"*, dirpath = , start = SCRATCH"* [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(335) New file SCRATCH"* [2006/06/23 12:38:22, 5] smbd/trans2.c:call_trans2findfirst(1688) dir=./, mask = SCRATCH"* [2006/06/23 12:38:22, 5] smbd/dir.c:dptr_create(391) dptr_create dir=./ [2006/06/23 12:38:22, 3] smbd/dir.c:dptr_create(511) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/23 12:38:22, 4] smbd/trans2.c:call_trans2findfirst(1745) dptr_num is 256, wcard = SCRATCH"*, attr = 22 [2006/06/23 12:38:22, 8] smbd/trans2.c:call_trans2findfirst(1750) dirpath=<./> dontdescend=<> [2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 0 [2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 2147483648 [2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 771496934 [2006/06/23 12:38:22, 5] smbd/msdfs.c:is_msdfs_link(281) is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch [2006/06/23 12:38:22, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300) dos_mode: ./scratch [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d[sparse] [2006/06/23 12:38:22, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) get_lanman2_dir_entry found ./scratch fname=scratch [2006/06/23 12:38:22, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 1671277131 [2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 2147483647 [2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset -1 [2006/06/23 12:38:22, 5] smbd/trans2.c:call_trans2findfirst(1798) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/23 12:38:22, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=176 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4544 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 D3 BF .......O ........ [020] 70 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F p......O .......O [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . [2006/06/23 12:38:22, 4] smbd/trans2.c:call_trans2findfirst(1834) SMBtrans2 mask=SCRATCH"* directory=./ dirtype=22 numentries=1 [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:name_map(617) name_map: SCRATCH"* -> 09E18AF1 -> S2QP5O~1 (cache=1) [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 19 of length 45 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=4608 smt_wct=3 smb_vwv[ 0]= 5959 (0x1747) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:22, 3] smbd/reply.c:reply_close(3257) close directory fnum=5959 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:22, 5] smbd/files.c:file_free(450) freed files structure 5959 (0 used) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=4608 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 90 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x5a [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 20 of length 94 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=90 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=4672 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 90 (0x5A) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=47 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 .\.\.1.7 .2...1.7 [010] 00 2E 00 34 00 39 00 2E 00 31 00 32 00 5C 00 49 ...4.9.. .1.2.\.I [020] 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F 3F 00 .P.C.$.. .?????. [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtconX (pid 23658) conn 0x0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 4] smbd/reply.c:reply_tcon_and_X(660) Client requested device type [?????] for share [IPC$] [2006/06/23 12:38:22, 5] smbd/service.c:make_connection(860) making a connection to 'normal' service ipc$ [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user rajeev [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is rajeev [2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98) Got rajeev from pwnam_cache [2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [rajeev]! [2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(488) Connect path is '/tmp' for service [IPC$] [2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for IPC$ [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216) Initialising default vfs hooks [2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2006/06/23 12:38:22, 10] smbd/uid.c:is_share_read_only_for_user(127) is_share_read_only_for_user: share IPC$ is read-only for unix user rajeev [2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for IPC$ [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(693) kreaper-xp (172.17.134.118) connect to service IPC$ initially as user rajeev (uid=1518, gid=40) (pid 23658) [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:22, 3] smbd/reply.c:reply_tcon_and_X(708) tconX service=IPC$ [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=103 smb_mid=4672 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 124 [2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x7c [2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194) Transaction 21 of length 128 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=124 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=748 smb_uid=103 smb_mid=4736 smt_wct=15 smb_vwv[ 0]= 56 (0x38) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 56 (0x38) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 16 (0x10) smb_bcc=59 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 00 00 03 00 5C 00 31 00 37 00 32 00 2E 00 31 .....\.1 .7.2...1 [010] 00 37 00 2E 00 34 00 39 00 2E 00 31 00 32 00 5C .7...4.9 ...1.2.\ [020] 00 64 00 66 00 73 00 5C 00 73 00 63 00 72 00 61 .d.f.s.\ .s.c.r.a [030] 00 74 00 63 00 68 00 5C 00 00 00 .t.c.h.\ ... [2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af71bc0 [2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2getdfsreferral(4668) call_trans2getdfsreferral [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(44) temp in parse_dfs_path: .172.17.49.12\dfs\scratch. after trimming \'s [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(54) parse_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(66) parse_dfs_path: servicename: dfs [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(71) parse_dfs_path: rest of the path: scratch [2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216) Initialising default vfs hooks [2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /export/dfsroot [2006/06/23 12:38:22, 10] smbd/msdfs.c:resolve_dfs_path(336) resolve_dfs_path: Conn path = /export/dfsroot req_path = scratch [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:38:22, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [SCRATCH] [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:38:22, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af6a9f0:size8) SCRATCH -> scratch [2006/06/23 12:38:22, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af6a9f0:size8) SCRATCH -> scratch [2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:38:22, 5] smbd/msdfs.c:is_msdfs_link(281) is_msdfs_link: scratch -> msdfs:netvenus.tigr.org\scratch [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_symlink(210) parse_symlink: count=1 [2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_symlink(236) parse_symlink: Created alt path: \netvenus.tigr.org\scratch [2006/06/23 12:38:22, 6] smbd/msdfs.c:resolve_dfs_path(350) resolve_dfs_path: \172.17.49.12\dfs\scratch\ resolves to a valid Dfs link. [2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/06/23 12:38:22, 3] smbd/msdfs.c:setup_dfs_referral(825) setup_dfs_referral: Path \172.17.49.12\dfs\scratch\ to alternate path(s): \netvenus.tigr.org\scratch. [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(835) max_referral_level :3 [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(711) setting up version3 referral [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(715) [2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058) [000] 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E 00 \.1.7.2. ..1.7... [010] 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 00 4.9...1. 2.\.d.f. [020] 73 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 s.\.s.c. r.a.t.c. [030] 68 00 5C 00 00 00 h.\... [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(724) referral 0 : \netvenus.tigr.org\scratch [2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(855) DFS Referral pdata: [2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058) [000] 34 00 01 00 02 00 00 00 03 00 22 00 00 00 00 00 4....... .."..... [010] 58 02 00 00 22 00 58 00 8E 00 00 00 00 00 00 00 X...".X. ........ [020] 00 00 00 00 00 00 00 00 00 00 5C 00 31 00 37 00 ........ ..\.1.7. [030] 32 00 2E 00 31 00 37 00 2E 00 34 00 39 00 2E 00 2...1.7. ..4.9... [040] 31 00 32 00 5C 00 64 00 66 00 73 00 5C 00 73 00 1.2.\.d. f.s.\.s. [050] 63 00 72 00 61 00 74 00 63 00 68 00 5C 00 00 00 c.r.a.t. c.h.\... [060] 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E 00 \.1.7.2. ..1.7... [070] 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 00 4.9...1. 2.\.d.f. [080] 73 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 s.\.s.c. r.a.t.c. [090] 68 00 5C 00 00 00 5C 00 6E 00 65 00 74 00 76 00 h.\...\. n.e.t.v. [0A0] 65 00 6E 00 75 00 73 00 2E 00 74 00 69 00 67 00 e.n.u.s. ..t.i.g. [0B0] 72 00 2E 00 6F 00 72 00 67 00 5C 00 73 00 63 00 r...o.r. g.\.s.c. [0C0] 72 00 61 00 74 00 63 00 68 00 00 00 r.a.t.c. h... [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 204, useable_space = 131012 [2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 204, paramsize = 0, datasize = 204 [2006/06/23 12:38:22, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:22, 5] lib/util.c:show_msg(464) size=260 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55361 smb_tid=3 smb_pid=748 smb_uid=103 smb_mid=4736 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 204 (0xCC) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=205 [2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058) [000] 00 34 00 01 00 02 00 00 00 03 00 22 00 00 00 00 .4...... ...".... [010] 00 58 02 00 00 22 00 58 00 8E 00 00 00 00 00 00 .X...".X ........ [020] 00 00 00 00 00 00 00 00 00 00 00 5C 00 31 00 37 ........ ...\.1.7 [030] 00 32 00 2E 00 31 00 37 00 2E 00 34 00 39 00 2E .2...1.7 ...4.9.. [040] 00 31 00 32 00 5C 00 64 00 66 00 73 00 5C 00 73 .1.2.\.d .f.s.\.s [050] 00 63 00 72 00 61 00 74 00 63 00 68 00 5C 00 00 .c.r.a.t .c.h.\.. [060] 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E .\.1.7.2 ...1.7.. [070] 00 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 .4.9...1 .2.\.d.f [080] 00 73 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 .s.\.s.c .r.a.t.c [090] 00 68 00 5C 00 00 00 5C 00 6E 00 65 00 74 00 76 .h.\...\ .n.e.t.v [0A0] 00 65 00 6E 00 75 00 73 00 2E 00 74 00 69 00 67 .e.n.u.s ...t.i.g [0B0] 00 72 00 2E 00 6F 00 72 00 67 00 5C 00 73 00 63 .r...o.r .g.\.s.c [0C0] 00 72 00 61 00 74 00 63 00 68 00 00 00 .r.a.t.c .h... [2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:22, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 110 [2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x6e [2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194) Transaction 22 of length 114 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=110 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4800 smt_wct=15 smb_vwv[ 0]= 42 (0x2A) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 42 (0x2A) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=45 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 00 00 EC 03 00 00 00 00 5C 00 31 00 37 00 32 ........ .\.1.7.2 [010] 00 2E 00 31 00 37 00 2E 00 34 00 39 00 2E 00 31 ...1.7.. .4.9...1 [020] 00 32 00 5C 00 64 00 66 00 73 00 00 00 .2.\.d.f .s... [2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:23, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:23, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:23, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:23, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:23, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /export/dfsroot [2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2861) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(91) temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s [2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(101) parse_processed_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(431) dfs_redirect: Not redirecting 172.17.49.12/dfs. [2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Path converted to non-dfs path [2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:23, 10] smbd/trans2.c:call_trans2qfilepathinfo(3108) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2006/06/23 12:38:23, 5] smbd/trans2.c:call_trans2qfilepathinfo(3118) SMB_QFBI - create: Thu Jun 22 10:32:53 2006 access: Fri Jun 23 12:38:22 2006 write: Thu Jun 22 10:32:53 2006 change: Thu Jun 22 10:32:53 2006 mode: 10 [2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4800 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 80 D8 B3 BE 08 96 C6 01 00 D3 BF ........ ........ [010] 70 E3 96 C6 01 80 D8 B3 BE 08 96 C6 01 80 D8 B3 p....... ........ [020] BE 08 96 C6 01 10 00 00 00 00 00 00 00 ........ ..... [2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:23, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 110 [2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x6e [2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194) Transaction 23 of length 114 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=110 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4864 smt_wct=15 smb_vwv[ 0]= 42 (0x2A) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 42 (0x2A) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=45 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 00 00 EC 03 00 00 00 00 5C 00 31 00 37 00 32 ........ .\.1.7.2 [010] 00 2E 00 31 00 37 00 2E 00 34 00 39 00 2E 00 31 ...1.7.. .4.9...1 [020] 00 32 00 5C 00 64 00 66 00 73 00 00 00 .2.\.d.f .s... [2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2861) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(91) temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s [2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(101) parse_processed_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(431) dfs_redirect: Not redirecting 172.17.49.12/dfs. [2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Path converted to non-dfs path [2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:23, 10] smbd/trans2.c:call_trans2qfilepathinfo(3108) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2006/06/23 12:38:23, 5] smbd/trans2.c:call_trans2qfilepathinfo(3118) SMB_QFBI - create: Thu Jun 22 10:32:53 2006 access: Fri Jun 23 12:38:22 2006 write: Thu Jun 22 10:32:53 2006 change: Thu Jun 22 10:32:53 2006 mode: 10 [2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4864 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 80 D8 B3 BE 08 96 C6 01 00 D3 BF ........ ........ [010] 70 E3 96 C6 01 80 D8 B3 BE 08 96 C6 01 80 D8 B3 p....... ........ [020] BE 08 96 C6 01 10 00 00 00 00 00 00 00 ........ ..... [2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:23, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 120 [2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x78 [2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194) Transaction 24 of length 124 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=120 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4928 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8704 (0x2200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8256 (0x2040) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=37 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 31 00 37 00 32 00 2E 00 31 00 37 00 2E .\.1.7.2 ...1.7.. [010] 00 34 00 39 00 2E 00 31 00 32 00 5C 00 64 00 66 .4.9...1 .2.\.d.f [020] 00 73 00 00 00 .s... [2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:23, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0 [2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(91) temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s [2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(101) parse_processed_dfs_path: hostname: 172.17.49.12 [2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(431) dfs_redirect: Not redirecting 172.17.49.12/dfs. [2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Path converted to non-dfs path [2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:23, 3] smbd/dosmode.c:unix_mode(121) unix_mode(.) returning 0744 [2006/06/23 12:38:23, 10] smbd/open.c:open_file_ntcreate(1091) open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x3 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0 [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:23, 10] smbd/open.c:open_file_ntcreate(1259) open_file_ntcreate: fname=., after mapping access_mask=0x100080 [2006/06/23 12:38:23, 5] smbd/files.c:file_new(128) allocated file structure 1864, fnum = 5960 (1 used) [2006/06/23 12:38:23, 4] smbd/open.c:open_file_ntcreate(1490) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/23 12:38:23, 5] smbd/files.c:file_free(450) freed files structure 5960 (0 used) [2006/06/23 12:38:23, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100080, share_access = 0x3 create_options = 0x204000, create_disposition = 0x1 [2006/06/23 12:38:23, 5] smbd/files.c:file_new(128) allocated file structure 1865, fnum = 5961 (1 used) [2006/06/23 12:38:23, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:38:23, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x204000, access_mask = 0x100080, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:23, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5961, open name = . [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4928 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=18688 (0x4900) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=49107 (0xBFD3) smb_vwv[11]=58224 (0xE370) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:23, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194) Transaction 25 of length 76 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4992 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 00 00 49 17 EE 03 ...I... [2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x204000, access_mask = 0x100080, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5961) level=1006 call=7 total_data=0 [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:23, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=4992 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... [2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:23, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 84 [2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x54 [2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194) Transaction 26 of length 88 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=5056 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 64 (0x40) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 168 (0xA8) smb_vwv[20]= 9 (0x9) smb_vwv[21]= 5961 (0x1749) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] 00 00 00 ... [2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993) switch message SMBnttrans (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:23, 10] smbd/nttrans.c:reply_nttrans(2806) reply_nttrans: setup_count = 8 [2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058) [000] A8 00 09 00 49 17 01 00 ....I... [2006/06/23 12:38:23, 10] smbd/nttrans.c:call_nt_transact_ioctl(2131) call_nt_transact_ioctl: function[0x000900A8] FID[0x1749] isFSctl[0x01] compfilter[0x00] [2006/06/23 12:38:23, 10] smbd/nttrans.c:call_nt_transact_ioctl(2162) FSCTL_GET_REPARSE_POINT: called on FID[0x1749](but not implemented) [2006/06/23 12:38:23, 3] smbd/error.c:error_packet(146) error packet at smbd/nttrans.c(95) cmd=160 (SMBnttrans) NT_STATUS_NOT_A_REPARSE_POINT [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa0 smb_rcls=117 smb_reh=2 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=748 smb_uid=103 smb_mid=5056 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:23, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194) Transaction 27 of length 45 [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=5120 smt_wct=3 smb_vwv[ 0]= 5961 (0x1749) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:23, 3] smbd/reply.c:reply_close(3257) close directory fnum=5961 [2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23658, share_access = 0x3, private_options = 0x204000, access_mask = 0x100080, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:23, 5] smbd/files.c:file_free(450) freed files structure 5961 (0 used) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:23, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=5120 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:23, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 39 [2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x27 [2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194) Transaction 28 of length 43 [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5184 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993) switch message SMBulogoffX (pid 23658) conn 0x0 [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 5] auth/auth_util.c:free_server_info(1511) attempting to free (and zero) a server_info structure [2006/06/23 12:38:26, 3] smbd/reply.c:reply_ulogoffX(1606) ulogoffX vuid=101 [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5184 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:26, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x23 [2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194) Transaction 29 of length 39 [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=5248 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993) switch message SMBtdis (pid 23658) conn 0x552af6f3a0 [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 3] smbd/service.c:close_cnum(885) kreaper-xp (172.17.134.118) closed connection to service IPC$ [2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to / [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=5248 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:26, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x23 [2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194) Transaction 30 of length 39 [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=103 smb_mid=5312 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993) switch message SMBtdis (pid 23658) conn 0x552af71bc0 [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 3] smbd/service.c:close_cnum(885) kreaper-xp (172.17.134.118) closed connection to service IPC$ [2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to / [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=103 smb_mid=5312 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:26, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 39 [2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x27 [2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194) Transaction 31 of length 43 [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=5376 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993) switch message SMBulogoffX (pid 23658) conn 0x0 [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 5] auth/auth_util.c:free_server_info(1511) attempting to free (and zero) a server_info structure [2006/06/23 12:38:26, 3] smbd/reply.c:reply_ulogoffX(1606) ulogoffX vuid=103 [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=5376 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:26, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x23 [2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194) Transaction 32 of length 39 [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=5440 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993) switch message SMBtdis (pid 23658) conn 0x552af70db0 [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /export/dfsroot [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 1] smbd/service.c:close_cnum(885) kreaper-xp (172.17.134.118) closed connection to service dfs [2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69) Yielding connection to dfs [2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to / [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:26, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=5440 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:26, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:26, 10] lib/util_sock.c:read_data(520) read_data: read of 4 returned 0. Error = Success [2006/06/23 12:38:26, 10] lib/util_sock.c:receive_smb_raw(669) receive_smb_raw: length < 0! [2006/06/23 12:38:26, 3] smbd/process.c:timeout_processing(1447) timeout_processing: End of file from client (client has disconnected). [2006/06/23 12:38:26, 5] lib/gencache.c:gencache_shutdown(89) Closing cache file [2006/06/23 12:38:26, 5] libsmb/namecache.c:namecache_shutdown(79) namecache_shutdown: netbios namecache closed successfully. [2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:26, 2] smbd/server.c:exit_server(614) Closing connections [2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2006/06/23 12:38:26, 3] smbd/server.c:exit_server(655) Server exit (normal exit) [2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:38:26, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080696) - last(1151080612) < 900 [2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.