Attachment 1981 Details for Bug 3853 – success attempt log

success attempt log

smb.log.success (text/plain), 444.35 KB, created by rajeev on 2006-06-23 11:51:31 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: rajeev

Created: 2006-06-23 11:51:31 UTC

Size: 444.35 KB

patch

obsolete

>[2006/06/23 12:38:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173)
>  find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found.
>[2006/06/23 12:38:16, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382)
>  announce_myself_to_domain_master_browser: t (1151080686) - last(1151080612) < 900
>[2006/06/23 12:38:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173)
>  find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.
>[2006/06/23 12:38:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173)
>  find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_KEEPALIVE = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_REUSEADDR = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_BROADCAST = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_NODELAY = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPCNT = 9
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPIDLE = 7200
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPINTVL = 75
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_LOWDELAY = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_THROUGHPUT = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDTIMEO = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVTIMEO = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_KEEPALIVE = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_REUSEADDR = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_BROADCAST = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_NODELAY = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPCNT = 9
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPIDLE = 7200
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPINTVL = 75
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_LOWDELAY = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_THROUGHPUT = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDTIMEO = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVTIMEO = 0
>[2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Jun 23 12:25:20 2006
>  
>[2006/06/23 12:38:22, 3] smbd/oplock.c:init_oplocks(871)
>  open_oplock_ipc: initializing messages.
>[2006/06/23 12:38:22, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(259)
>  Linux kernel oplocks enabled
>[2006/06/23 12:38:22, 4] lib/time.c:TimeInit(142)
>  TimeInit: Serverzone is 14400
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 133
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x85
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 0 of length 137
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=133
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51283
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=0
>  smb_bcc=98
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 02 50 43 20 4E 45 54 57  4F 52 4B 20 50 52 4F 47  .PC NETW ORK PROG
>  [010] 52 41 4D 20 31 2E 30 00  02 4C 41 4E 4D 41 4E 31  RAM 1.0. .LANMAN1
>  [020] 2E 30 00 02 57 69 6E 64  6F 77 73 20 66 6F 72 20  .0..Wind ows for 
>  [030] 57 6F 72 6B 67 72 6F 75  70 73 20 33 2E 31 61 00  Workgrou ps 3.1a.
>  [040] 02 4C 4D 31 2E 32 58 30  30 32 00 02 4C 41 4E 4D  .LM1.2X0 02..LANM
>  [050] 41 4E 32 2E 31 00 02 4E  54 20 4C 4D 20 30 2E 31  AN2.1..N T LM 0.1
>  [060] 32 00                                             2. 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBnegprot (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486)
>  Requested protocol [LANMAN1.0]
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486)
>  Requested protocol [LM1.2X002]
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486)
>  Requested protocol [LANMAN2.1]
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(486)
>  Requested protocol [NT LM 0.12]
>[2006/06/23 12:38:22, 10] lib/util.c:set_remote_arch(2033)
>  set_remote_arch: Client arch is 'Win2K'
>[2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Jun 23 12:25:20 2006
>  
>[2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170)
>  claiming  0
>[2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Jun 23 12:25:20 2006
>  
>[2006/06/23 12:38:22, 10] lib/util.c:name_to_fqdn(2675)
>  name_to_fqdn: lookup for IBRIX2 -> IBRIX2.tigr.org.
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_nt1(357)
>  using SPNEGO
>[2006/06/23 12:38:22, 3] smbd/negprot.c:reply_negprot(579)
>  Selected protocol NT LM 0.12
>[2006/06/23 12:38:22, 5] smbd/negprot.c:reply_negprot(585)
>  negprot index=5
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=174
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=17
>  smb_vwv[ 0]=    5 (0x5)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=27136 (0x6A00)
>  smb_vwv[ 8]=   92 (0x5C)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=33011 (0x80F3)
>  smb_vwv[11]=  128 (0x80)
>  smb_vwv[12]=49107 (0xBFD3)
>  smb_vwv[13]=58224 (0xE370)
>  smb_vwv[14]=50838 (0xC696)
>  smb_vwv[15]=61441 (0xF001)
>  smb_vwv[16]=26880 (0x6900)
>  smb_bcc=105
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 69 62 72 69 78 32 00 00  00 00 00 00 00 00 00 00  ibrix2.. ........
>  [010] 60 57 06 06 2B 06 01 05  05 02 A0 4D 30 4B A0 24  `W..+... ...M0K.$
>  [020] 30 22 06 09 2A 86 48 86  F7 12 01 02 02 06 09 2A  0"..*.H. .......*
>  [030] 86 48 82 F7 12 01 02 02  06 0A 2B 06 01 04 01 82  .H...... ..+.....
>  [040] 37 02 02 0A A3 23 30 21  A0 1F 1B 1D 63 69 66 73  7....#0! ....cifs
>  [050] 2F 69 62 72 69 78 32 2E  74 69 67 72 2E 6F 72 67  /ibrix2. tigr.org
>  [060] 40 54 49 47 52 2E 4F 52  47                       @TIGR.OR G
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 236
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0xec
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 1 of length 240
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=236
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=3456
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  236 (0xEC)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   74 (0x4A)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=177
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 60 48 06 06 2B 06 01 05  05 02 A0 3E 30 3C A0 0E  `H..+... ...>0<..
>  [010] 30 0C 06 0A 2B 06 01 04  01 82 37 02 02 0A A2 2A  0...+... ..7....*
>  [020] 04 28 4E 54 4C 4D 53 53  50 00 01 00 00 00 97 82  .(NTLMSS P.......
>  [030] 08 E2 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [040] 00 00 05 01 28 0A 00 00  00 0F 00 57 00 69 00 6E  ....(... ...W.i.n
>  [050] 00 64 00 6F 00 77 00 73  00 20 00 32 00 30 00 30  .d.o.w.s . .2.0.0
>  [060] 00 32 00 20 00 53 00 65  00 72 00 76 00 69 00 63  .2. .S.e .r.v.i.c
>  [070] 00 65 00 20 00 50 00 61  00 63 00 6B 00 20 00 32  .e. .P.a .c.k. .2
>  [080] 00 20 00 32 00 36 00 30  00 30 00 00 00 57 00 69  . .2.6.0 .0...W.i
>  [090] 00 6E 00 64 00 6F 00 77  00 73 00 20 00 32 00 30  .n.d.o.w .s. .2.0
>  [0A0] 00 30 00 32 00 20 00 35  00 2E 00 31 00 00 00 00  .0.2. .5 ...1....
>  [0B0] 00                                                . 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBsesssetupX (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822)
>  wct=12 flg2=0xc807
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633)
>  Doing spnego session setup
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664)
>  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2006/06/23 12:38:22, 10] lib/util.c:set_remote_arch(2033)
>  set_remote_arch: Client arch is 'WinXP'
>[2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182)
>  register_vuid: allocated vuid = 100
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(525)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(528)
>  Got secblob of size 40
>[2006/06/23 12:38:22, 5] auth/auth.c:make_auth_context_subsystem(503)
>  Making default auth method list for security=ADS
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend rhosts
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'rhosts'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend hostsequiv
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'hostsequiv'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend sam
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'sam'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend sam_ignoredomain
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'sam_ignoredomain'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend unix
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'unix'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend winbind
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'winbind'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend smbserver
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'smbserver'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend trustdomain
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'trustdomain'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend ntdomain
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'ntdomain'
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend guest
>[2006/06/23 12:38:22, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'guest'
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match guest
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method guest has a valid init
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match sam
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method sam has a valid init
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match winbind:ntdomain
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match ntdomain
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method ntdomain has a valid init
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method winbind has a valid init
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0xe2088297
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_LM_KEY
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>    NTLMSSP_NEGOTIATE_56
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module guest did not want to specify a challenge
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module sam did not want to specify a challenge
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module winbind did not want to specify a challenge
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(135)
>  auth_context challenge created by random
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(136)
>  challenge is: 
>[2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058)
>  [000] DC BA C6 26 31 B3 76 2D                           ...&1.v- 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=262
>  smb_com=0x73
>  smb_rcls=22
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3456
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  173 (0xAD)
>  smb_bcc=219
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] A1 81 AA 30 81 A7 A0 03  0A 01 01 A1 0C 06 0A 2B  ...0.... .......+
>  [010] 06 01 04 01 82 37 02 02  0A A2 81 91 04 81 8E 4E  .....7.. .......N
>  [020] 54 4C 4D 53 53 50 00 02  00 00 00 08 00 08 00 30  TLMSSP.. .......0
>  [030] 00 00 00 B5 82 89 60 DC  BA C6 26 31 B3 76 2D 00  ......`. ..&1.v-.
>  [040] 00 00 00 00 00 00 00 56  00 56 00 38 00 00 00 54  .......V .V.8...T
>  [050] 00 49 00 47 00 52 00 02  00 08 00 54 00 49 00 47  .I.G.R.. ...T.I.G
>  [060] 00 52 00 01 00 0C 00 49  00 42 00 52 00 49 00 58  .R.....I .B.R.I.X
>  [070] 00 32 00 04 00 10 00 74  00 69 00 67 00 72 00 2E  .2.....t .i.g.r..
>  [080] 00 6F 00 72 00 67 00 03  00 1E 00 69 00 62 00 72  .o.r.g.. ...i.b.r
>  [090] 00 69 00 78 00 32 00 2E  00 74 00 69 00 67 00 72  .i.x.2.. .t.i.g.r
>  [0A0] 00 2E 00 6F 00 72 00 67  00 00 00 00 00 55 00 6E  ...o.r.g .....U.n
>  [0B0] 00 69 00 78 00 00 00 53  00 61 00 6D 00 62 00 61  .i.x...S .a.m.b.a
>  [0C0] 00 20 00 33 00 2E 00 30  00 2E 00 32 00 32 00 00  . .3...0 ...2.2..
>  [0D0] 00 54 00 49 00 47 00 52  00 00 00                 .T.I.G.R ...
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 278
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x116
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 2 of length 282
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=278
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3520
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  278 (0x116)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  117 (0x75)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=219
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] A1 73 30 71 A2 6F 04 6D  4E 54 4C 4D 53 53 50 00  .s0q.o.m NTLMSSP.
>  [010] 03 00 00 00 01 00 01 00  5C 00 00 00 00 00 00 00  ........ \.......
>  [020] 5D 00 00 00 00 00 00 00  48 00 00 00 00 00 00 00  ]....... H.......
>  [030] 48 00 00 00 14 00 14 00  48 00 00 00 10 00 10 00  H....... H.......
>  [040] 5D 00 00 00 15 8A 88 62  05 01 28 0A 00 00 00 0F  ]......b ..(.....
>  [050] 4B 00 52 00 45 00 41 00  50 00 45 00 52 00 2D 00  K.R.E.A. P.E.R.-.
>  [060] 58 00 50 00 00 EC EE 16  40 2C 61 D0 7C 26 85 7C  X.P..... @,a.|&.|
>  [070] 0F 68 65 CC EF 57 00 69  00 6E 00 64 00 6F 00 77  .he..W.i .n.d.o.w
>  [080] 00 73 00 20 00 32 00 30  00 30 00 32 00 20 00 53  .s. .2.0 .0.2. .S
>  [090] 00 65 00 72 00 76 00 69  00 63 00 65 00 20 00 50  .e.r.v.i .c.e. .P
>  [0A0] 00 61 00 63 00 6B 00 20  00 32 00 20 00 32 00 36  .a.c.k.  .2. .2.6
>  [0B0] 00 30 00 30 00 00 00 57  00 69 00 6E 00 64 00 6F  .0.0...W .i.n.d.o
>  [0C0] 00 77 00 73 00 20 00 32  00 30 00 30 00 32 00 20  .w.s. .2 .0.0.2. 
>  [0D0] 00 35 00 2E 00 31 00 00  00 00 00                 .5...1.. ...
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBsesssetupX (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822)
>  wct=12 flg2=0xc807
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633)
>  Doing spnego session setup
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664)
>  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(662)
>  Got user=[] domain=[] workstation=[KREAPER-XP] len1=1 len2=0
>[2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Jun 23 12:25:20 2006
>  
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info_map(163)
>  make_user_info_map: Mapping user []\[] from workstation [KREAPER-XP]
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272)
>  Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jun 23 12:47:32 2006
>  
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_set(130)
>  Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Fri Jun 23 12:48:22 2006
>   (600 seconds ahead)
>[2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(43)
>  ads_dc_name: domain=TIGR
>[2006/06/23 12:38:22, 6] libads/ldap.c:ads_find_dc(217)
>  ads_find_dc: looking for realm 'TIGR.ORG'
>[2006/06/23 12:38:22, 8] libsmb/namequery.c:get_sorted_dc_list(1433)
>  get_sorted_dc_list: attempting lookup using [ads]
>[2006/06/23 12:38:22, 10] libsmb/namequery.c:internal_resolve_name(1028)
>  internal_resolve_name: looking up dc.tigr.org#20
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272)
>  Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006
>  
>[2006/06/23 12:38:22, 5] libsmb/namecache.c:namecache_fetch(201)
>  name dc.tigr.org#20 found.
>[2006/06/23 12:38:22, 10] libsmb/namequery.c:remove_duplicate_addrs2(320)
>  remove_duplicate_addrs2: looking for duplicate address/port pairs
>[2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1406)
>  get_dc_list: returning 1 ip addresses in an ordered list
>[2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1407)
>  get_dc_list: 172.17.5.33:389 
>[2006/06/23 12:38:22, 5] libads/ldap.c:ads_try_connect(126)
>  ads_try_connect: trying ldap server '172.17.5.33' port 389
>[2006/06/23 12:38:22, 3] libads/ldap.c:ads_connect(288)
>  Connected to LDAP server 172.17.5.33
>[2006/06/23 12:38:22, 3] libads/ldap.c:ads_server_info(2542)
>  got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG
>[2006/06/23 12:38:22, 4] libads/ldap.c:ads_server_info(2548)
>  time offset is 0 seconds
>[2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(63)
>  ads_dc_name: using server='TIGRDC2' IP=172.17.5.33
>[2006/06/23 12:38:22, 3] libsmb/cliconnect.c:cli_start_connection(1389)
>  Connecting to host=TIGRDC2
>[2006/06/23 12:38:22, 3] lib/util_sock.c:open_socket_out(870)
>  Connecting to 172.17.5.33 at port 445
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_KEEPALIVE = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_REUSEADDR = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_BROADCAST = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_NODELAY = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPCNT = 9
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPIDLE = 7200
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPINTVL = 75
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_LOWDELAY = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_THROUGHPUT = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDTIMEO = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVTIMEO = 0
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,183)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,183) wrote 183
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 174
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=174
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12815 (0x320F)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  499 (0x1F3)
>  smb_vwv[11]= 5760 (0x1680)
>  smb_vwv[12]=  891 (0x37B)
>  smb_vwv[13]=58225 (0xE371)
>  smb_vwv[14]=50838 (0xC696)
>  smb_vwv[15]=61441 (0xF001)
>  smb_vwv[16]=    0 (0x0)
>  smb_bcc=105
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 BB 4D 69 D7 68 42 49  95 EE 1D 7E BA FE E4 A1  I.Mi.hBI ...~....
>  [010] 60 57 06 06 2B 06 01 05  05 02 A0 4D 30 4B A0 30  `W..+... ...M0K.0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. .......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H...... ..*.H...
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 17 30 15 A0 13 1B 11  74 69 67 72 64 63 32 24  ..0..... tigrdc2$
>  [060] 40 54 49 47 52 2E 4F 52  47                       @TIGR.OR G
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=174
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12815 (0x320F)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  499 (0x1F3)
>  smb_vwv[11]= 5760 (0x1680)
>  smb_vwv[12]=  891 (0x37B)
>  smb_vwv[13]=58225 (0xE371)
>  smb_vwv[14]=50838 (0xC696)
>  smb_vwv[15]=61441 (0xF001)
>  smb_vwv[16]=    0 (0x0)
>  smb_bcc=105
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 BB 4D 69 D7 68 42 49  95 EE 1D 7E BA FE E4 A1  I.Mi.hBI ...~....
>  [010] 60 57 06 06 2B 06 01 05  05 02 A0 4D 30 4B A0 30  `W..+... ...M0K.0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. .......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H...... ..*.H...
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 17 30 15 A0 13 1B 11  74 69 67 72 64 63 32 24  ..0..... tigrdc2$
>  [060] 40 54 49 47 52 2E 4F 52  47                       @TIGR.OR G
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,92)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,92) wrote 92
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 179
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=179
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  179 (0xB3)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=138
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 41 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  AW.i.n.d .o.w.s. 
>  [010] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [020] 00 30 00 30 00 33 00 20  00 33 00 37 00 39 00 30  .0.0.3.  .3.7.9.0
>  [030] 00 20 00 53 00 65 00 72  00 76 00 69 00 63 00 65  . .S.e.r .v.i.c.e
>  [040] 00 20 00 50 00 61 00 63  00 6B 00 20 00 31 00 00  . .P.a.c .k. .1..
>  [050] 00 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [060] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [070] 00 30 00 30 00 33 00 20  00 35 00 2E 00 32 00 00  .0.0.3.  .5...2..
>  [080] 00 54 00 49 00 47 00 52  00 00                    .T.I.G.R ..
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=179
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  179 (0xB3)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=138
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 41 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  AW.i.n.d .o.w.s. 
>  [010] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [020] 00 30 00 30 00 33 00 20  00 33 00 37 00 39 00 30  .0.0.3.  .3.7.9.0
>  [030] 00 20 00 53 00 65 00 72  00 76 00 69 00 63 00 65  . .S.e.r .v.i.c.e
>  [040] 00 20 00 50 00 61 00 63  00 6B 00 20 00 31 00 00  . .P.a.c .k. .1..
>  [050] 00 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [060] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [070] 00 30 00 30 00 33 00 20  00 35 00 2E 00 32 00 00  .0.0.3.  .5...2..
>  [080] 00 54 00 49 00 47 00 52  00 00                    .T.I.G.R ..
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,82)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,82) wrote 82
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 48
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=3
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_init_creds(233)
>  cli_init_creds: user  domain 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,104)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,104) wrote 104
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 103
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=4
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  103 (0x67)
>  smb_vwv[ 2]= 1792 (0x700)
>  smb_vwv[ 3]=  384 (0x180)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=   16 (0x10)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044)
>  Bind RPC Pipe[8007]: \lsarpc auth_type 0, auth_level 0
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647)
>  Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB  EF 00 01 23 45 67 89 AB  xW4.4... ...#Eg..
>  [010] 00 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650)
>  Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11  9F E8 08 00 2B 10 48 60  .]...... ....+.H`
>  [010] 02 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0048
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_rb 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0018 num_contexts: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      001c context_id  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      001e num_transfer_syntaxes: 01
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      00001f smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000020 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0020 data   : 12345778
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0024 data   : 1234
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0026 data   : abcd
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0028 data   : ef 00 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              002a data   : 01 23 45 67 89 ab 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0030 version: 00000000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000034 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000034 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0034 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0038 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              003a data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003c data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003e data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0044 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=154
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=5
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32775 (0x8007)
>  smb_bcc=87
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 0B 03 10 00 00 00 48  00 00 00 01 00 00 00 B8  .......H ........
>  [020] 10 B8 10 00 00 00 00 01  00 00 00 00 00 01 00 78  ........ .......x
>  [030] 57 34 12 34 12 CD AB EF  00 01 23 45 67 89 AB 00  W4.4.... ..#Eg...
>  [040] 00 00 00 04 5D 88 8A EB  1C C9 11 9F E8 08 00 2B  ....]... .......+
>  [050] 10 48 60 02 00 00 00                              .H`.... 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,158)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,158) wrote 158
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 124
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 48 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  H....... .D......
>  [010] 00 B8 10 B8 10 10 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 48 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  H....... .D......
>  [010] 00 B8 10 B8 10 10 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000001
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 68 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 returned 68 bytes.
>[2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
>  rpc_pipe_bind: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 bind request returned ok.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_ba 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 0106cb10
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000018 smb_io_rpc_addr_str 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0018 len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          001a str: \PIPE\lsass.
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000026 smb_io_rpc_results 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>          0028 num_results: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002c result     : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002e reason     : 0000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000030 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000030 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0030 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0034 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0036 data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0038 data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003a data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0040 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701)
>  check_bind_response: accepted!
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246)
>  cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine TIGRDC2 and bound anonymously.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(142)
>  init_lsa_sec_qos
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_open_pol(261)
>  init_open_pol: attr:0 da:1
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193)
>  init_lsa_obj_attr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_q_open_pol 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0000 ptr       : 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0004 system_name: 005c
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000008 lsa_io_obj_attr 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0008 len         : 00000018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          000c ptr_root_dir: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0010 ptr_obj_name: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 attributes  : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0018 ptr_sec_desc: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          001c ptr_sec_qos : 00000001
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000020 lsa_io_obj_qos sec_qos
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0020 len           : 0000000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0024 sec_imp_level : 0002
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0026 sec_ctxt_mode : 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0027 effective_only: 00
>[2006/06/23 12:38:22, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
>  lsa_io_sec_qos: length c does not match size 8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0028 des_access: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr    
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000002
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 0000002c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0016 opnum     : 0006
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=150
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=6
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   68 (0x44)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32775 (0x8007)
>  smb_bcc=83
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 44  00 00 00 02 00 00 00 2C  .......D .......,
>  [020] 00 00 00 00 00 06 00 01  00 00 00 5C 00 00 00 18  ........ ...\....
>  [030] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [040] 00 00 00 01 00 00 00 0C  00 00 00 02 00 01 00 01  ........ ........
>  [050] 00 00 00                                          ... 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,154)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,154) wrote 154
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 104
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 44 05 00 02 03 10 00 00  00 30 00 00 00 02 00 00  D....... .0......
>  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 FA 56 6D  ........ ......Vm
>  [020] 5D 61 0F 91 4F 9C 0B 3A  64 46 1F 63 BD 00 00 00  ]a..O..: dF.c....
>  [030] 00                                                . 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 44 05 00 02 03 10 00 00  00 30 00 00 00 02 00 00  D....... .0......
>  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 FA 56 6D  ........ ......Vm
>  [020] 5D 61 0F 91 4F 9C 0B 3A  64 46 1F 63 BD 00 00 00  ]a..O..: dF.c....
>  [030] 00                                                . 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0030
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000002
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 00000018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0016 cancel_ct : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0017 reserved  : 00
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577)
>  cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 48 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 returned 48 bytes.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_r_open_pol 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_pol_hnd 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0000 data1: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0004 data2: 5d6d56fa
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0008 data3: 0f61
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          000a data4: 4f91
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          000c data5: 9c 0b 3a 64 46 1f 63 bd 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762)
>      0014 status: NT_STATUS_OK
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(477)
>  init_q_enum_trust_dom
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_q_enum_trust_dom 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_pol_hnd 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0000 data1: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0004 data2: 5d6d56fa
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0008 data3: 0f61
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          000a data4: 4f91
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          000c data5: 9c 0b 3a 64 46 1f 63 bd 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0014 enum_context : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0018 preferred_len: 00010000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr    
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0034
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000003
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 0000001c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0016 opnum     : 000d
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=134
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=7
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   52 (0x34)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   52 (0x34)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32775 (0x8007)
>  smb_bcc=67
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 34  00 00 00 03 00 00 00 1C  .......4 ........
>  [020] 00 00 00 00 00 0D 00 00  00 00 00 FA 56 6D 5D 61  ........ ....Vm]a
>  [030] 0F 91 4F 9C 0B 3A 64 46  1F 63 BD 00 00 00 00 00  ..O..:dF .c......
>  [040] 00 01 00                                          ... 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,138)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,138) wrote 138
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 96
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 34 05 00 02 03 10 00 00  00 28 00 00 00 03 00 00  4....... .(......
>  [010] 00 10 00 00 00 00 00 00  00 00 00 00 80 00 00 00  ........ ........
>  [020] 00 00 00 00 00 1A 00 00  80                       ........ .
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 34 05 00 02 03 10 00 00  00 28 00 00 00 03 00 00  4....... .(......
>  [010] 00 10 00 00 00 00 00 00  00 00 00 00 80 00 00 00  ........ ........
>  [020] 00 00 00 00 00 1A 00 00  80                       ........ .
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0028
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000003
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 00000010
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0016 cancel_ct : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0017 reserved  : 00
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577)
>  cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 40 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x8007 returned 32 bytes.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_r_enum_trust_dom 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0000 enum_context: 80000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0004 count: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0008 ptr: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762)
>      000c status: NT_STATUS_NO_MORE_ENTRIES
>[2006/06/23 12:38:22, 10] libsmb/trusts_util.c:enumerate_domain_trusts(196)
>  enumerate_domain_trusts: shutting down connection...
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,45)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,45) wrote 45
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=8
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383)
>  cli_rpc_pipe_close: closed pipe \lsarpc to machine TIGRDC2
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,39)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,39) wrote 39
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=45061
>  smb_pid=23658
>  smb_uid=14338
>  smb_mid=9
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(294)
>  Cache entry with key = TDOM/TIGR couldn't be found
>[2006/06/23 12:38:22, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
>  no entry for trusted domain TIGR found.
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(69)
>  attempting to make a user_info for  ()
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(79)
>  making strings for 's user_info struct
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(121)
>  making blobs for 's user_info struct
>[2006/06/23 12:38:22, 10] auth/auth_util.c:make_user_info(139)
>  made an encrypted user_info for  ()
>[2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(219)
>  check_ntlm_password:  Checking password for unmapped user []\[]@[KREAPER-XP] with the new password interface
>[2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(222)
>  check_ntlm_password:  mapped user is: [TIGR]\[]@[KREAPER-XP]
>[2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(231)
>  check_ntlm_password: auth_context challenge created by random
>[2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(233)
>  challenge is: 
>[2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058)
>  [000] DC BA C6 26 31 B3 76 2D                           ...&1.v- 
>[2006/06/23 12:38:22, 10] lib/account_pol.c:account_policy_get(332)
>  account_policy_get: name: password history, val: 0
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_username(617)
>  pdb_set_username: setting username nobody, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
>  pdb_set_domain: setting domain IBRIX2, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671)
>  pdb_set_nt_username: setting nt username , was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_fullname(698)
>  pdb_set_full_name: setting full name nobody, was 
>[2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359)
>  Home server: ibrix2
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
>  pdb_set_homedir: setting home dir \\ibrix2\nobody, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725)
>  pdb_set_logon_script: setting logon script , was 
>[2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359)
>  Home server: ibrix2
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
>  pdb_set_profile_path: setting profile path \\ibrix2\nobody\profile, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_workstations(885)
>  pdb_set_workstations: setting workstations , was 
>[2006/06/23 12:38:22, 10] lib/account_pol.c:account_policy_get(332)
>  account_policy_get: name: password history, val: 0
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544)
>  pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-501
>[2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-1055192801-1434710095-1259064960-501 from rid 501
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580)
>  pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-514
>[2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
>  pdb_set_group_sid_from_rid:
>  	setting group sid S-1-5-21-1055192801-1434710095-1259064960-514 from rid 514
>[2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(268)
>  check_ntlm_password: guest authentication for user [] succeeded
>[2006/06/23 12:38:22, 5] auth/auth.c:check_ntlm_password(307)
>  check_ntlm_password:  guest authentication for user [] -> [] -> [nobody] succeeded
>[2006/06/23 12:38:22, 5] auth/auth_util.c:free_user_info(1485)
>  attempting to free (and zero) a user_info structure
>[2006/06/23 12:38:22, 10] auth/auth_util.c:free_user_info(1488)
>  structure was created for 
>[2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(120)
>  Got NT session key of length 16
>[2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(127)
>  Got LM session key of length 16
>[2006/06/23 12:38:22, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(755)
>  ntlmssp_server_auth: Using unmodified nt session key.
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0x60088235
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_SEAL
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>[2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182)
>  register_vuid: allocated vuid = 101
>[2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98)
>  Got nobody from pwnam_cache
>[2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(255)
>  register_vuid: (99,99) nobody  IBRIX2 guest=1
>[2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(257)
>  User name: nobody	Real name: nobody
>[2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(276)
>  UNIX uid 99 is UNIX user nobody, and will be vuid 101
>[2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Jun 23 12:25:20 2006
>  
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=98
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3520
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    9 (0x9)
>  smb_bcc=55
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] A1 07 30 05 A0 03 0A 01  00 55 00 6E 00 69 00 78  ..0..... .U.n.i.x
>  [010] 00 00 00 53 00 61 00 6D  00 62 00 61 00 20 00 33  ...S.a.m .b.a. .3
>  [020] 00 2E 00 30 00 2E 00 32  00 32 00 00 00 54 00 49  ...0...2 .2...T.I
>  [030] 00 47 00 52 00 00 00                              .G.R... 
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 90
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x5a
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 3 of length 94
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=90
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3584
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   90 (0x5A)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=47
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 5C 00 31 00 37  00 32 00 2E 00 31 00 37  .\.\.1.7 .2...1.7
>  [010] 00 2E 00 34 00 39 00 2E  00 31 00 32 00 5C 00 49  ...4.9.. .1.2.\.I
>  [020] 00 50 00 43 00 24 00 00  00 3F 3F 3F 3F 3F 00     .P.C.$.. .?????.
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtconX (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 4] smbd/reply.c:reply_tcon_and_X(660)
>  Client requested device type [?????] for share [IPC$]
>[2006/06/23 12:38:22, 5] smbd/service.c:make_connection(860)
>  making a connection to 'normal' service ipc$
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290)
>  Finding user nobody
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234)
>  Trying _Get_Pwnam(), username as lowercase is nobody
>[2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98)
>  Got nobody from pwnam_cache
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267)
>  Get_Pwnam_internals did find user [nobody]!
>[2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(488)
>  Connect path is '/tmp' for service [IPC$]
>[2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240)
>  get_share_security: using default secdesc for IPC$
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233)
>  se_access_check: requested access 0x00000002, for NT token with 7 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-501.
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250)
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-501
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-514
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-32-546
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1199
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1181
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308)
>  se_access_check: access (2) granted.
>[2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216)
>  Initialising default vfs hooks
>[2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170)
>  claiming IPC$ 0
>[2006/06/23 12:38:22, 10] smbd/uid.c:is_share_read_only_for_user(127)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user nobody
>[2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240)
>  get_share_security: using default secdesc for IPC$
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233)
>  se_access_check: requested access 0x00000001, for NT token with 7 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-501.
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250)
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-501
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-514
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-32-546
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1199
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1181
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308)
>  se_access_check: access (1) granted.
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-1055192801-1434710095-1259064960-501
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-1055192801-1434710095-1259064960-501
>  SID[  1]: S-1-5-21-1055192801-1434710095-1259064960-514
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-5-21-1055192801-1434710095-1259064960-1199
>  SID[  6]: S-1-5-21-1055192801-1434710095-1259064960-1181
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 99
>  Primary group is 99 and contains 2 supplementary groups
>  Group[  0]: 99
>  Group[  1]: 90
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309)
>  change_to_user uid=(99,99) gid=(0,99)
>[2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(693)
>  kreaper-xp (172.17.134.118) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 23658)
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 3] smbd/reply.c:reply_tcon_and_X(708)
>  tconX service=IPC$ 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=3584
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 106
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x6a
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 4 of length 110
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=106
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=4
>  smb_uid=101
>  smb_mid=3648
>  smt_wct=15
>  smb_vwv[ 0]=   38 (0x26)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   38 (0x26)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=   16 (0x10)
>  smb_bcc=41
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 03 00 5C 00 31  00 37 00 32 00 2E 00 31  .....\.1 .7.2...1
>  [010] 00 37 00 2E 00 34 00 39  00 2E 00 31 00 32 00 5C  .7...4.9 ...1.2.\
>  [020] 00 64 00 66 00 73 00 00  00                       .d.f.s.. .
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af6f3a0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-1055192801-1434710095-1259064960-501
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-1055192801-1434710095-1259064960-501
>  SID[  1]: S-1-5-21-1055192801-1434710095-1259064960-514
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-5-21-1055192801-1434710095-1259064960-1199
>  SID[  6]: S-1-5-21-1055192801-1434710095-1259064960-1181
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 99
>  Primary group is 99 and contains 2 supplementary groups
>  Group[  0]: 99
>  Group[  1]: 90
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309)
>  change_to_user uid=(99,99) gid=(0,99)
>[2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /tmp
>[2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2getdfsreferral(4668)
>  call_trans2getdfsreferral
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(44)
>  temp in parse_dfs_path: .172.17.49.12\dfs. after trimming \'s
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(54)
>  parse_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(835)
>  max_referral_level :3
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(711)
>  setting up version3 referral
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(715)
>[2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058)
>  [000] 5C 00 31 00 37 00 32 00  2E 00 31 00 37 00 2E 00  \.1.7.2. ..1.7...
>  [010] 34 00 39 00 2E 00 31 00  32 00 5C 00 64 00 66 00  4.9...1. 2.\.d.f.
>  [020] 73 00 00 00                                       s... 
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(724)
>  referral 0 : \172.17.49.12\dfs
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(855)
>  DFS Referral pdata:
>[2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058)
>  [000] 22 00 01 00 03 00 00 00  03 00 22 00 01 00 00 00  "....... ..".....
>  [010] 58 02 00 00 22 00 46 00  6A 00 00 00 00 00 00 00  X...".F. j.......
>  [020] 00 00 00 00 00 00 00 00  00 00 5C 00 31 00 37 00  ........ ..\.1.7.
>  [030] 32 00 2E 00 31 00 37 00  2E 00 34 00 39 00 2E 00  2...1.7. ..4.9...
>  [040] 31 00 32 00 5C 00 64 00  66 00 73 00 00 00 5C 00  1.2.\.d. f.s...\.
>  [050] 31 00 37 00 32 00 2E 00  31 00 37 00 2E 00 34 00  1.7.2... 1.7...4.
>  [060] 39 00 2E 00 31 00 32 00  5C 00 64 00 66 00 73 00  9...1.2. \.d.f.s.
>  [070] 00 00 5C 00 31 00 37 00  32 00 2E 00 31 00 37 00  ..\.1.7. 2...1.7.
>  [080] 2E 00 34 00 39 00 2E 00  31 00 32 00 5C 00 64 00  ..4.9... 1.2.\.d.
>  [090] 66 00 73 00 00 00                                 f.s... 
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 150, useable_space = 131012
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 0, data_to_send = 150, paramsize = 0, datasize = 150
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=206
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55361
>  smb_tid=1
>  smb_pid=4
>  smb_uid=101
>  smb_mid=3648
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  150 (0x96)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  150 (0x96)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=151
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 22 00 01 00 03 00 00  00 03 00 22 00 01 00 00  ."...... ..."....
>  [010] 00 58 02 00 00 22 00 46  00 6A 00 00 00 00 00 00  .X...".F .j......
>  [020] 00 00 00 00 00 00 00 00  00 00 00 5C 00 31 00 37  ........ ...\.1.7
>  [030] 00 32 00 2E 00 31 00 37  00 2E 00 34 00 39 00 2E  .2...1.7 ...4.9..
>  [040] 00 31 00 32 00 5C 00 64  00 66 00 73 00 00 00 5C  .1.2.\.d .f.s...\
>  [050] 00 31 00 37 00 32 00 2E  00 31 00 37 00 2E 00 34  .1.7.2.. .1.7...4
>  [060] 00 39 00 2E 00 31 00 32  00 5C 00 64 00 66 00 73  .9...1.2 .\.d.f.s
>  [070] 00 00 00 5C 00 31 00 37  00 32 00 2E 00 31 00 37  ...\.1.7 .2...1.7
>  [080] 00 2E 00 34 00 39 00 2E  00 31 00 32 00 5C 00 64  ...4.9.. .1.2.\.d
>  [090] 00 66 00 73 00 00 00                              .f.s... 
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 236
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0xec
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 5 of length 240
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=236
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=3712
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  236 (0xEC)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   74 (0x4A)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=177
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 60 48 06 06 2B 06 01 05  05 02 A0 3E 30 3C A0 0E  `H..+... ...>0<..
>  [010] 30 0C 06 0A 2B 06 01 04  01 82 37 02 02 0A A2 2A  0...+... ..7....*
>  [020] 04 28 4E 54 4C 4D 53 53  50 00 01 00 00 00 97 82  .(NTLMSS P.......
>  [030] 08 E2 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [040] 00 00 05 01 28 0A 00 00  00 0F 00 57 00 69 00 6E  ....(... ...W.i.n
>  [050] 00 64 00 6F 00 77 00 73  00 20 00 32 00 30 00 30  .d.o.w.s . .2.0.0
>  [060] 00 32 00 20 00 53 00 65  00 72 00 76 00 69 00 63  .2. .S.e .r.v.i.c
>  [070] 00 65 00 20 00 50 00 61  00 63 00 6B 00 20 00 32  .e. .P.a .c.k. .2
>  [080] 00 20 00 32 00 36 00 30  00 30 00 00 00 57 00 69  . .2.6.0 .0...W.i
>  [090] 00 6E 00 64 00 6F 00 77  00 73 00 20 00 32 00 30  .n.d.o.w .s. .2.0
>  [0A0] 00 30 00 32 00 20 00 35  00 2E 00 31 00 00 00 00  .0.2. .5 ...1....
>  [0B0] 00                                                . 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBsesssetupX (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822)
>  wct=12 flg2=0xc807
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633)
>  Doing spnego session setup
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664)
>  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182)
>  register_vuid: allocated vuid = 102
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(525)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(528)
>  Got secblob of size 40
>[2006/06/23 12:38:22, 5] auth/auth.c:make_auth_context_subsystem(503)
>  Making default auth method list for security=ADS
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match guest
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method guest has a valid init
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match sam
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method sam has a valid init
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match winbind:ntdomain
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(389)
>  load_auth_module: Attempting to find an auth method to match ntdomain
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method ntdomain has a valid init
>[2006/06/23 12:38:22, 5] auth/auth.c:load_auth_module(414)
>  load_auth_module: auth method winbind has a valid init
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0xe2088297
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_LM_KEY
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>    NTLMSSP_NEGOTIATE_56
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module guest did not want to specify a challenge
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module sam did not want to specify a challenge
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module winbind did not want to specify a challenge
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(135)
>  auth_context challenge created by random
>[2006/06/23 12:38:22, 5] auth/auth.c:get_ntlm_challenge(136)
>  challenge is: 
>[2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058)
>  [000] F9 13 27 9F D1 89 BC B8                           ..'..... 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=262
>  smb_com=0x73
>  smb_rcls=22
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=3712
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  173 (0xAD)
>  smb_bcc=219
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] A1 81 AA 30 81 A7 A0 03  0A 01 01 A1 0C 06 0A 2B  ...0.... .......+
>  [010] 06 01 04 01 82 37 02 02  0A A2 81 91 04 81 8E 4E  .....7.. .......N
>  [020] 54 4C 4D 53 53 50 00 02  00 00 00 08 00 08 00 30  TLMSSP.. .......0
>  [030] 00 00 00 B5 82 89 60 F9  13 27 9F D1 89 BC B8 00  ......`. .'......
>  [040] 00 00 00 00 00 00 00 56  00 56 00 38 00 00 00 54  .......V .V.8...T
>  [050] 00 49 00 47 00 52 00 02  00 08 00 54 00 49 00 47  .I.G.R.. ...T.I.G
>  [060] 00 52 00 01 00 0C 00 49  00 42 00 52 00 49 00 58  .R.....I .B.R.I.X
>  [070] 00 32 00 04 00 10 00 74  00 69 00 67 00 72 00 2E  .2.....t .i.g.r..
>  [080] 00 6F 00 72 00 67 00 03  00 1E 00 69 00 62 00 72  .o.r.g.. ...i.b.r
>  [090] 00 69 00 78 00 32 00 2E  00 74 00 69 00 67 00 72  .i.x.2.. .t.i.g.r
>  [0A0] 00 2E 00 6F 00 72 00 67  00 00 00 00 00 55 00 6E  ...o.r.g .....U.n
>  [0B0] 00 69 00 78 00 00 00 53  00 61 00 6D 00 62 00 61  .i.x...S .a.m.b.a
>  [0C0] 00 20 00 33 00 2E 00 30  00 2E 00 32 00 32 00 00  . .3...0 ...2.2..
>  [0D0] 00 54 00 49 00 47 00 52  00 00 00                 .T.I.G.R ...
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 350
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x15e
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 6 of length 354
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=350
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=3776
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  350 (0x15E)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  188 (0xBC)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=291
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] A1 81 B9 30 81 B6 A2 81  B3 04 81 B0 4E 54 4C 4D  ...0.... ....NTLM
>  [010] 53 53 50 00 03 00 00 00  18 00 18 00 70 00 00 00  SSP..... ....p...
>  [020] 18 00 18 00 88 00 00 00  08 00 08 00 48 00 00 00  ........ ....H...
>  [030] 0C 00 0C 00 50 00 00 00  14 00 14 00 5C 00 00 00  ....P... ....\...
>  [040] 10 00 10 00 A0 00 00 00  15 82 88 62 05 01 28 0A  ........ ...b..(.
>  [050] 00 00 00 0F 54 00 49 00  47 00 52 00 72 00 61 00  ....T.I. G.R.r.a.
>  [060] 6A 00 65 00 65 00 76 00  4B 00 52 00 45 00 41 00  j.e.e.v. K.R.E.A.
>  [070] 50 00 45 00 52 00 2D 00  58 00 50 00 58 52 A0 C3  P.E.R.-. X.P.XR..
>  [080] 0D 3B 83 3A 00 00 00 00  00 00 00 00 00 00 00 00  .;.:.... ........
>  [090] 00 00 00 00 A0 CC F4 BF  35 DB DE 5D 22 88 3A 14  ........ 5..]".:.
>  [0A0] 81 D0 00 44 C6 77 54 CC  ED A8 DC E9 EE 79 D8 12  ...D.wT. .....y..
>  [0B0] D1 5A ED 9E 28 6C E1 6F  99 E5 52 B9 00 57 00 69  .Z..(l.o ..R..W.i
>  [0C0] 00 6E 00 64 00 6F 00 77  00 73 00 20 00 32 00 30  .n.d.o.w .s. .2.0
>  [0D0] 00 30 00 32 00 20 00 53  00 65 00 72 00 76 00 69  .0.2. .S .e.r.v.i
>  [0E0] 00 63 00 65 00 20 00 50  00 61 00 63 00 6B 00 20  .c.e. .P .a.c.k. 
>  [0F0] 00 32 00 20 00 32 00 36  00 30 00 30 00 00 00 57  .2. .2.6 .0.0...W
>  [100] 00 69 00 6E 00 64 00 6F  00 77 00 73 00 20 00 32  .i.n.d.o .w.s. .2
>  [110] 00 30 00 30 00 32 00 20  00 35 00 2E 00 31 00 00  .0.0.2.  .5...1..
>  [120] 00 00 00                                          ... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBsesssetupX (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822)
>  wct=12 flg2=0xc807
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633)
>  Doing spnego session setup
>[2006/06/23 12:38:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664)
>  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(662)
>  Got user=[rajeev] domain=[TIGR] workstation=[KREAPER-XP] len1=24 len2=24
>[2006/06/23 12:38:22, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66)
>  auth_context challenge set by NTLMSSP callback (NTLM2)
>[2006/06/23 12:38:22, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67)
>  challenge is: 
>[2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058)
>  [000] C8 6D E8 54 4D 53 61 F1                           .m.TMSa. 
>[2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Jun 23 12:25:20 2006
>  
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info_map(163)
>  make_user_info_map: Mapping user [TIGR]\[rajeev] from workstation [KREAPER-XP]
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272)
>  Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jun 23 12:48:22 2006
>  
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_set(130)
>  Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Fri Jun 23 12:48:22 2006
>   (600 seconds ahead)
>[2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(43)
>  ads_dc_name: domain=TIGR
>[2006/06/23 12:38:22, 6] libads/ldap.c:ads_find_dc(217)
>  ads_find_dc: looking for realm 'TIGR.ORG'
>[2006/06/23 12:38:22, 8] libsmb/namequery.c:get_sorted_dc_list(1433)
>  get_sorted_dc_list: attempting lookup using [ads]
>[2006/06/23 12:38:22, 10] libsmb/namequery.c:internal_resolve_name(1028)
>  internal_resolve_name: looking up dc.tigr.org#20
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272)
>  Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006
>  
>[2006/06/23 12:38:22, 5] libsmb/namecache.c:namecache_fetch(201)
>  name dc.tigr.org#20 found.
>[2006/06/23 12:38:22, 10] libsmb/namequery.c:remove_duplicate_addrs2(320)
>  remove_duplicate_addrs2: looking for duplicate address/port pairs
>[2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1406)
>  get_dc_list: returning 1 ip addresses in an ordered list
>[2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1407)
>  get_dc_list: 172.17.5.33:389 
>[2006/06/23 12:38:22, 5] libads/ldap.c:ads_try_connect(126)
>  ads_try_connect: trying ldap server '172.17.5.33' port 389
>[2006/06/23 12:38:22, 3] libads/ldap.c:ads_connect(288)
>  Connected to LDAP server 172.17.5.33
>[2006/06/23 12:38:22, 3] libads/ldap.c:ads_server_info(2542)
>  got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG
>[2006/06/23 12:38:22, 4] libads/ldap.c:ads_server_info(2548)
>  time offset is 0 seconds
>[2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(63)
>  ads_dc_name: using server='TIGRDC2' IP=172.17.5.33
>[2006/06/23 12:38:22, 3] libsmb/cliconnect.c:cli_start_connection(1389)
>  Connecting to host=TIGRDC2
>[2006/06/23 12:38:22, 3] lib/util_sock.c:open_socket_out(870)
>  Connecting to 172.17.5.33 at port 445
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_KEEPALIVE = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_REUSEADDR = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_BROADCAST = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_NODELAY = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPCNT = 9
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPIDLE = 7200
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPINTVL = 75
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_LOWDELAY = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_THROUGHPUT = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDTIMEO = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVTIMEO = 0
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,183)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,183) wrote 183
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 174
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=174
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12815 (0x320F)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  499 (0x1F3)
>  smb_vwv[11]=53888 (0xD280)
>  smb_vwv[12]= 2111 (0x83F)
>  smb_vwv[13]=58225 (0xE371)
>  smb_vwv[14]=50838 (0xC696)
>  smb_vwv[15]=61441 (0xF001)
>  smb_vwv[16]=    0 (0x0)
>  smb_bcc=105
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 BB 4D 69 D7 68 42 49  95 EE 1D 7E BA FE E4 A1  I.Mi.hBI ...~....
>  [010] 60 57 06 06 2B 06 01 05  05 02 A0 4D 30 4B A0 30  `W..+... ...M0K.0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. .......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H...... ..*.H...
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 17 30 15 A0 13 1B 11  74 69 67 72 64 63 32 24  ..0..... tigrdc2$
>  [060] 40 54 49 47 52 2E 4F 52  47                       @TIGR.OR G
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=174
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12815 (0x320F)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  499 (0x1F3)
>  smb_vwv[11]=53888 (0xD280)
>  smb_vwv[12]= 2111 (0x83F)
>  smb_vwv[13]=58225 (0xE371)
>  smb_vwv[14]=50838 (0xC696)
>  smb_vwv[15]=61441 (0xF001)
>  smb_vwv[16]=    0 (0x0)
>  smb_bcc=105
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 BB 4D 69 D7 68 42 49  95 EE 1D 7E BA FE E4 A1  I.Mi.hBI ...~....
>  [010] 60 57 06 06 2B 06 01 05  05 02 A0 4D 30 4B A0 30  `W..+... ...M0K.0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. .......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H...... ..*.H...
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 17 30 15 A0 13 1B 11  74 69 67 72 64 63 32 24  ..0..... tigrdc2$
>  [060] 40 54 49 47 52 2E 4F 52  47                       @TIGR.OR G
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,92)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,92) wrote 92
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 179
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=179
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  179 (0xB3)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=138
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 23 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  #W.i.n.d .o.w.s. 
>  [010] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [020] 00 30 00 30 00 33 00 20  00 33 00 37 00 39 00 30  .0.0.3.  .3.7.9.0
>  [030] 00 20 00 53 00 65 00 72  00 76 00 69 00 63 00 65  . .S.e.r .v.i.c.e
>  [040] 00 20 00 50 00 61 00 63  00 6B 00 20 00 31 00 00  . .P.a.c .k. .1..
>  [050] 00 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [060] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [070] 00 30 00 30 00 33 00 20  00 35 00 2E 00 32 00 00  .0.0.3.  .5...2..
>  [080] 00 54 00 49 00 47 00 52  00 00                    .T.I.G.R ..
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=179
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  179 (0xB3)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=138
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 23 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  #W.i.n.d .o.w.s. 
>  [010] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [020] 00 30 00 30 00 33 00 20  00 33 00 37 00 39 00 30  .0.0.3.  .3.7.9.0
>  [030] 00 20 00 53 00 65 00 72  00 76 00 69 00 63 00 65  . .S.e.r .v.i.c.e
>  [040] 00 20 00 50 00 61 00 63  00 6B 00 20 00 31 00 00  . .P.a.c .k. .1..
>  [050] 00 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [060] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [070] 00 30 00 30 00 33 00 20  00 35 00 2E 00 32 00 00  .0.0.3.  .5...2..
>  [080] 00 54 00 49 00 47 00 52  00 00                    .T.I.G.R ..
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,82)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,82) wrote 82
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 48
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=3
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_init_creds(233)
>  cli_init_creds: user  domain 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,104)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,104) wrote 104
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 103
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=4
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  103 (0x67)
>  smb_vwv[ 2]=  512 (0x200)
>  smb_vwv[ 3]=  320 (0x140)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=   16 (0x10)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044)
>  Bind RPC Pipe[4002]: \lsarpc auth_type 0, auth_level 0
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647)
>  Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB  EF 00 01 23 45 67 89 AB  xW4.4... ...#Eg..
>  [010] 00 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650)
>  Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11  9F E8 08 00 2B 10 48 60  .]...... ....+.H`
>  [010] 02 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0048
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000004
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_rb 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0018 num_contexts: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      001c context_id  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      001e num_transfer_syntaxes: 01
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      00001f smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000020 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0020 data   : 12345778
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0024 data   : 1234
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0026 data   : abcd
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0028 data   : ef 00 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              002a data   : 01 23 45 67 89 ab 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0030 version: 00000000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000034 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000034 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0034 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0038 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              003a data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003c data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003e data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0044 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=154
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=5
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16386 (0x4002)
>  smb_bcc=87
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 0B 03 10 00 00 00 48  00 00 00 04 00 00 00 B8  .......H ........
>  [020] 10 B8 10 00 00 00 00 01  00 00 00 00 00 01 00 78  ........ .......x
>  [030] 57 34 12 34 12 CD AB EF  00 01 23 45 67 89 AB 00  W4.4.... ..#Eg...
>  [040] 00 00 00 04 5D 88 8A EB  1C C9 11 9F E8 08 00 2B  ....]... .......+
>  [050] 10 48 60 02 00 00 00                              .H`.... 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,158)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,158) wrote 158
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 124
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 48 05 00 0C 03 10 00 00  00 44 00 00 00 04 00 00  H....... .D......
>  [010] 00 B8 10 B8 10 11 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  80 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 48 05 00 0C 03 10 00 00  00 44 00 00 00 04 00 00  H....... .D......
>  [010] 00 B8 10 B8 10 11 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  80 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000004
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 68 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 returned 68 bytes.
>[2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
>  rpc_pipe_bind: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 bind request returned ok.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000004
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_ba 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 0106cb11
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000018 smb_io_rpc_addr_str 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0018 len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          001a str: \PIPE\lsass.
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000026 smb_io_rpc_results 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>          0028 num_results: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002c result     : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002e reason     : 0000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000030 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000030 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0030 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0034 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0036 data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0038 data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003a data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0040 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701)
>  check_bind_response: accepted!
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246)
>  cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine TIGRDC2 and bound anonymously.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(142)
>  init_lsa_sec_qos
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_open_pol(261)
>  init_open_pol: attr:0 da:1
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193)
>  init_lsa_obj_attr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_q_open_pol 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0000 ptr       : 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0004 system_name: 005c
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000008 lsa_io_obj_attr 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0008 len         : 00000018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          000c ptr_root_dir: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0010 ptr_obj_name: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 attributes  : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0018 ptr_sec_desc: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          001c ptr_sec_qos : 00000001
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000020 lsa_io_obj_qos sec_qos
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0020 len           : 0000000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0024 sec_imp_level : 0002
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0026 sec_ctxt_mode : 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0027 effective_only: 00
>[2006/06/23 12:38:22, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
>  lsa_io_sec_qos: length c does not match size 8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0028 des_access: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr    
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000005
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 0000002c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0016 opnum     : 0006
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=150
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=6
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   68 (0x44)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16386 (0x4002)
>  smb_bcc=83
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 44  00 00 00 05 00 00 00 2C  .......D .......,
>  [020] 00 00 00 00 00 06 00 01  00 00 00 5C 00 00 00 18  ........ ...\....
>  [030] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [040] 00 00 00 01 00 00 00 0C  00 00 00 02 00 01 00 01  ........ ........
>  [050] 00 00 00                                          ... 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,154)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,154) wrote 154
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 104
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 44 05 00 02 03 10 00 00  00 30 00 00 00 05 00 00  D....... .0......
>  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 72 40 4B  ........ .....r@K
>  [020] D2 F1 DD 7A 42 85 C6 A9  D6 C2 69 9F 2D 00 00 00  ...zB... ..i.-...
>  [030] 00                                                . 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 44 05 00 02 03 10 00 00  00 30 00 00 00 05 00 00  D....... .0......
>  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 72 40 4B  ........ .....r@K
>  [020] D2 F1 DD 7A 42 85 C6 A9  D6 C2 69 9F 2D 00 00 00  ...zB... ..i.-...
>  [030] 00                                                . 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0030
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000005
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 00000018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0016 cancel_ct : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0017 reserved  : 00
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577)
>  cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 48 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 returned 48 bytes.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_r_open_pol 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_pol_hnd 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0000 data1: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0004 data2: d24b4072
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0008 data3: ddf1
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          000a data4: 427a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          000c data5: 85 c6 a9 d6 c2 69 9f 2d 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762)
>      0014 status: NT_STATUS_OK
>[2006/06/23 12:38:22, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(477)
>  init_q_enum_trust_dom
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_q_enum_trust_dom 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_pol_hnd 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0000 data1: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0004 data2: d24b4072
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0008 data3: ddf1
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          000a data4: 427a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          000c data5: 85 c6 a9 d6 c2 69 9f 2d 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0014 enum_context : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0018 preferred_len: 00010000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr    
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0034
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000006
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 0000001c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0016 opnum     : 000d
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=134
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=7
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   52 (0x34)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   52 (0x34)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16386 (0x4002)
>  smb_bcc=67
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 34  00 00 00 06 00 00 00 1C  .......4 ........
>  [020] 00 00 00 00 00 0D 00 00  00 00 00 72 40 4B D2 F1  ........ ...r@K..
>  [030] DD 7A 42 85 C6 A9 D6 C2  69 9F 2D 00 00 00 00 00  .zB..... i.-.....
>  [040] 00 01 00                                          ... 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,138)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,138) wrote 138
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 96
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 34 05 00 02 03 10 00 00  00 28 00 00 00 06 00 00  4....... .(......
>  [010] 00 10 00 00 00 00 00 00  00 00 00 00 80 00 00 00  ........ ........
>  [020] 00 00 00 00 00 1A 00 00  80                       ........ .
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 34 05 00 02 03 10 00 00  00 28 00 00 00 06 00 00  4....... .(......
>  [010] 00 10 00 00 00 00 00 00  00 00 00 00 80 00 00 00  ........ ........
>  [020] 00 00 00 00 00 1A 00 00  80                       ........ .
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0028
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000006
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 00000010
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0016 cancel_ct : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0017 reserved  : 00
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577)
>  cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 40 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x4002 returned 32 bytes.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 lsa_io_r_enum_trust_dom 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0000 enum_context: 80000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0004 count: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0008 ptr: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762)
>      000c status: NT_STATUS_NO_MORE_ENTRIES
>[2006/06/23 12:38:22, 10] libsmb/trusts_util.c:enumerate_domain_trusts(196)
>  enumerate_domain_trusts: shutting down connection...
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,45)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,45) wrote 45
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=8
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383)
>  cli_rpc_pipe_close: closed pipe \lsarpc to machine TIGRDC2
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,39)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,39) wrote 39
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=2053
>  smb_pid=23658
>  smb_uid=4097
>  smb_mid=9
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(294)
>  Cache entry with key = TDOM/TIGR couldn't be found
>[2006/06/23 12:38:22, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
>  no entry for trusted domain TIGR found.
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(69)
>  attempting to make a user_info for rajeev (rajeev)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(79)
>  making strings for rajeev's user_info struct
>[2006/06/23 12:38:22, 5] auth/auth_util.c:make_user_info(121)
>  making blobs for rajeev's user_info struct
>[2006/06/23 12:38:22, 10] auth/auth_util.c:make_user_info(139)
>  made an encrypted user_info for rajeev (rajeev)
>[2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(219)
>  check_ntlm_password:  Checking password for unmapped user [TIGR]\[rajeev]@[KREAPER-XP] with the new password interface
>[2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(222)
>  check_ntlm_password:  mapped user is: [TIGR]\[rajeev]@[KREAPER-XP]
>[2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(231)
>  check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
>[2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(233)
>  challenge is: 
>[2006/06/23 12:38:22, 5] lib/util.c:dump_data(2058)
>  [000] C8 6D E8 54 4D 53 61 F1                           .m.TMSa. 
>[2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(259)
>  check_ntlm_password: guest had nothing to say
>[2006/06/23 12:38:22, 8] lib/util.c:is_myname(1879)
>  is_myname("TIGR") returns 0
>[2006/06/23 12:38:22, 6] auth/auth_sam.c:check_samstrict_security(383)
>  check_samstrict_security: TIGR is not one of my local names (ROLE_DOMAIN_MEMBER)
>[2006/06/23 12:38:22, 10] auth/auth.c:check_ntlm_password(259)
>  check_ntlm_password: sam had nothing to say
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(43)
>  ads_dc_name: domain=TIGR
>[2006/06/23 12:38:22, 6] libads/ldap.c:ads_find_dc(217)
>  ads_find_dc: looking for realm 'TIGR.ORG'
>[2006/06/23 12:38:22, 8] libsmb/namequery.c:get_sorted_dc_list(1433)
>  get_sorted_dc_list: attempting lookup using [ads]
>[2006/06/23 12:38:22, 10] libsmb/namequery.c:internal_resolve_name(1028)
>  internal_resolve_name: looking up dc.tigr.org#20
>[2006/06/23 12:38:22, 10] lib/gencache.c:gencache_get(272)
>  Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006
>  
>[2006/06/23 12:38:22, 5] libsmb/namecache.c:namecache_fetch(201)
>  name dc.tigr.org#20 found.
>[2006/06/23 12:38:22, 10] libsmb/namequery.c:remove_duplicate_addrs2(320)
>  remove_duplicate_addrs2: looking for duplicate address/port pairs
>[2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1406)
>  get_dc_list: returning 1 ip addresses in an ordered list
>[2006/06/23 12:38:22, 4] libsmb/namequery.c:get_dc_list(1407)
>  get_dc_list: 172.17.5.33:389 
>[2006/06/23 12:38:22, 5] libads/ldap.c:ads_try_connect(126)
>  ads_try_connect: trying ldap server '172.17.5.33' port 389
>[2006/06/23 12:38:22, 3] libads/ldap.c:ads_connect(288)
>  Connected to LDAP server 172.17.5.33
>[2006/06/23 12:38:22, 3] libads/ldap.c:ads_server_info(2542)
>  got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG
>[2006/06/23 12:38:22, 4] libads/ldap.c:ads_server_info(2548)
>  time offset is 0 seconds
>[2006/06/23 12:38:22, 4] libsmb/namequery_dc.c:ads_dc_name(63)
>  ads_dc_name: using server='TIGRDC2' IP=172.17.5.33
>[2006/06/23 12:38:22, 10] passdb/secrets.c:secrets_named_mutex(809)
>  secrets_named_mutex: got mutex for TIGRDC2
>[2006/06/23 12:38:22, 3] libsmb/cliconnect.c:cli_start_connection(1389)
>  Connecting to host=TIGRDC2
>[2006/06/23 12:38:22, 3] lib/util_sock.c:open_socket_out(870)
>  Connecting to 172.17.5.33 at port 445
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_KEEPALIVE = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_REUSEADDR = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_BROADCAST = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_NODELAY = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPCNT = 9
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPIDLE = 7200
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option TCP_KEEPINTVL = 75
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_LOWDELAY = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option IPTOS_THROUGHPUT = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVBUF = 16384
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVLOWAT = 1
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_SNDTIMEO = 0
>[2006/06/23 12:38:22, 5] lib/util_sock.c:print_socket_options(206)
>  socket option SO_RCVTIMEO = 0
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,183)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,183) wrote 183
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 174
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=174
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12815 (0x320F)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  499 (0x1F3)
>  smb_vwv[11]=36480 (0x8E80)
>  smb_vwv[12]= 3332 (0xD04)
>  smb_vwv[13]=58225 (0xE371)
>  smb_vwv[14]=50838 (0xC696)
>  smb_vwv[15]=61441 (0xF001)
>  smb_vwv[16]=    0 (0x0)
>  smb_bcc=105
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 BB 4D 69 D7 68 42 49  95 EE 1D 7E BA FE E4 A1  I.Mi.hBI ...~....
>  [010] 60 57 06 06 2B 06 01 05  05 02 A0 4D 30 4B A0 30  `W..+... ...M0K.0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. .......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H...... ..*.H...
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 17 30 15 A0 13 1B 11  74 69 67 72 64 63 32 24  ..0..... tigrdc2$
>  [060] 40 54 49 47 52 2E 4F 52  47                       @TIGR.OR G
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=174
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12815 (0x320F)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  499 (0x1F3)
>  smb_vwv[11]=36480 (0x8E80)
>  smb_vwv[12]= 3332 (0xD04)
>  smb_vwv[13]=58225 (0xE371)
>  smb_vwv[14]=50838 (0xC696)
>  smb_vwv[15]=61441 (0xF001)
>  smb_vwv[16]=    0 (0x0)
>  smb_bcc=105
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 BB 4D 69 D7 68 42 49  95 EE 1D 7E BA FE E4 A1  I.Mi.hBI ...~....
>  [010] 60 57 06 06 2B 06 01 05  05 02 A0 4D 30 4B A0 30  `W..+... ...M0K.0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. .......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H...... ..*.H...
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 17 30 15 A0 13 1B 11  74 69 67 72 64 63 32 24  ..0..... tigrdc2$
>  [060] 40 54 49 47 52 2E 4F 52  47                       @TIGR.OR G
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,92)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,92) wrote 92
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 179
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=179
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  179 (0xB3)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=138
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 24 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  $W.i.n.d .o.w.s. 
>  [010] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [020] 00 30 00 30 00 33 00 20  00 33 00 37 00 39 00 30  .0.0.3.  .3.7.9.0
>  [030] 00 20 00 53 00 65 00 72  00 76 00 69 00 63 00 65  . .S.e.r .v.i.c.e
>  [040] 00 20 00 50 00 61 00 63  00 6B 00 20 00 31 00 00  . .P.a.c .k. .1..
>  [050] 00 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [060] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [070] 00 30 00 30 00 33 00 20  00 35 00 2E 00 32 00 00  .0.0.3.  .5...2..
>  [080] 00 54 00 49 00 47 00 52  00 00                    .T.I.G.R ..
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=179
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=0
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  179 (0xB3)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=138
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 24 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  $W.i.n.d .o.w.s. 
>  [010] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [020] 00 30 00 30 00 33 00 20  00 33 00 37 00 39 00 30  .0.0.3.  .3.7.9.0
>  [030] 00 20 00 53 00 65 00 72  00 76 00 69 00 63 00 65  . .S.e.r .v.i.c.e
>  [040] 00 20 00 50 00 61 00 63  00 6B 00 20 00 31 00 00  . .P.a.c .k. .1..
>  [050] 00 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [060] 00 53 00 65 00 72 00 76  00 65 00 72 00 20 00 32  .S.e.r.v .e.r. .2
>  [070] 00 30 00 30 00 33 00 20  00 35 00 2E 00 32 00 00  .0.0.3.  .5...2..
>  [080] 00 54 00 49 00 47 00 52  00 00                    .T.I.G.R ..
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,82)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,82) wrote 82
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 48
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=3
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_init_creds(233)
>  cli_init_creds: user  domain 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,108)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,108) wrote 108
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 103
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=4
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  103 (0x67)
>  smb_vwv[ 2]=  768 (0x300)
>  smb_vwv[ 3]=  384 (0x180)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=   16 (0x10)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044)
>  Bind RPC Pipe[8003]: \NETLOGON auth_type 0, auth_level 0
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647)
>  Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB  EF 00 01 23 45 67 CF FB  xV4.4... ...#Eg..
>  [010] 01 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650)
>  Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11  9F E8 08 00 2B 10 48 60  .]...... ....+.H`
>  [010] 02 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0048
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_rb 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0018 num_contexts: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      001c context_id  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      001e num_transfer_syntaxes: 01
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      00001f smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000020 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0020 data   : 12345678
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0024 data   : 1234
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0026 data   : abcd
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0028 data   : ef 00 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              002a data   : 01 23 45 67 cf fb 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0030 version: 00000001
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000034 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000034 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0034 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0038 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              003a data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003c data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003e data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0044 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=154
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=5
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32771 (0x8003)
>  smb_bcc=87
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 0B 03 10 00 00 00 48  00 00 00 07 00 00 00 B8  .......H ........
>  [020] 10 B8 10 00 00 00 00 01  00 00 00 00 00 01 00 78  ........ .......x
>  [030] 56 34 12 34 12 CD AB EF  00 01 23 45 67 CF FB 01  V4.4.... ..#Eg...
>  [040] 00 00 00 04 5D 88 8A EB  1C C9 11 9F E8 08 00 2B  ....]... .......+
>  [050] 10 48 60 02 00 00 00                              .H`.... 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,158)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,158) wrote 158
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 124
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 48 05 00 0C 03 10 00 00  00 44 00 00 00 07 00 00  H....... .D......
>  [010] 00 B8 10 B8 10 12 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  80 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 48 05 00 0C 03 10 00 00  00 44 00 00 00 07 00 00  H....... .D......
>  [010] 00 B8 10 B8 10 12 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  80 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000007
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 68 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 returned 68 bytes.
>[2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
>  rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 bind request returned ok.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_ba 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 0106cb12
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000018 smb_io_rpc_addr_str 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0018 len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          001a str: \PIPE\lsass.
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000026 smb_io_rpc_results 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>          0028 num_results: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002c result     : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002e reason     : 0000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000030 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000030 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0030 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0034 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0036 data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0038 data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003a data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0040 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701)
>  check_bind_response: accepted!
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246)
>  cli_rpc_pipe_open_noauth: opened pipe \NETLOGON to machine TIGRDC2 and bound anonymously.
>[2006/06/23 12:38:22, 4] passdb/secrets.c:secrets_fetch_trust_account_password(282)
>  Using cleartext machine password
>[2006/06/23 12:38:22, 4] rpc_client/cli_netlogon.c:rpccli_net_req_chal(46)
>  cli_net_req_chal: LSA Request Challenge from IBRIX2 to \\TIGRDC2
>[2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_req_chal(679)
>  init_q_req_chal: 679
>[2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_req_chal(688)
>  init_q_req_chal: 688
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 net_io_q_req_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0000 undoc_buffer: 00000001
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000004 smb_io_unistr2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0004 uni_max_len: 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0008 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          000c uni_str_len: 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>          0010 buffer     : \.\.T.I.G.R.D.C.2...
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000024 smb_io_unistr2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0024 uni_max_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0028 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          002c uni_str_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>          0030 buffer     : I.B.R.I.X.2...
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      00003e smb_io_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          003e data: a8 9e 5e ea 27 d0 3e 56 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr    
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 005e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 00000046
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0016 opnum     : 0004
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=176
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=6
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   94 (0x5E)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   94 (0x5E)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32771 (0x8003)
>  smb_bcc=109
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 5E  00 00 00 08 00 00 00 46  .......^ .......F
>  [020] 00 00 00 00 00 04 00 01  00 00 00 0A 00 00 00 00  ........ ........
>  [030] 00 00 00 0A 00 00 00 5C  00 5C 00 54 00 49 00 47  .......\ .\.T.I.G
>  [040] 00 52 00 44 00 43 00 32  00 00 00 07 00 00 00 00  .R.D.C.2 ........
>  [050] 00 00 00 07 00 00 00 49  00 42 00 52 00 49 00 58  .......I .B.R.I.X
>  [060] 00 32 00 00 00 A8 9E 5E  EA 27 D0 3E 56           .2.....^ .'.>V
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,180)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,180) wrote 180
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 92
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=92
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   36 (0x24)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   36 (0x24)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=37
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 5E 05 00 02 03 10 00 00  00 24 00 00 00 08 00 00  ^....... .$......
>  [010] 00 0C 00 00 00 00 00 00  00 A0 82 30 3A D1 8D 76  ........ ...0:..v
>  [020] D9 00 00 00 00                                    ..... 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=92
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   36 (0x24)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   36 (0x24)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=37
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 5E 05 00 02 03 10 00 00  00 24 00 00 00 08 00 00  ^....... .$......
>  [010] 00 0C 00 00 00 00 00 00  00 A0 82 30 3A D1 8D 76  ........ ...0:..v
>  [020] D9 00 00 00 00                                    ..... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0024
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 0000000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0016 cancel_ct : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0017 reserved  : 00
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577)
>  cli_pipe_validate_current_pdu: got pdu len 36, data_len 12, ss_len 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 36 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 returned 24 bytes.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 net_io_r_req_chal 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          0000 data: a0 82 30 3a d1 8d 76 d9 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762)
>      0008 status: NT_STATUS_OK
>[2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(213)
>  creds_client_init: client chal : A89E5EEA27D03E56
>[2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(214)
>  creds_client_init: server chal : A082303AD18D76D9
>[2006/06/23 12:38:22, 4] libsmb/credentials.c:cred_create_session_key(65)
>  cred_create_session_key
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(67)
>  	clnt_chal_in: A89E5EEA27D03E56
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(68)
>  	srv_chal_in : A082303AD18D76D9
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(69)
>  	clnt+srv : 48218F24F85DB52F
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:cred_create_session_key(70)
>  	sess_key_out : 4714D41F4FD74113
>[2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(240)
>  creds_client_init: clnt : 9EE13ABFBEDD7D74
>[2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(241)
>  creds_client_init: server : 8AF56A6D7449D958
>[2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_init(242)
>  creds_client_init: seed : 9EE13ABFBEDD7D74
>[2006/06/23 12:38:22, 4] rpc_client/cli_netlogon.c:rpccli_net_auth2(170)
>  cli_net_auth2: srv:\\TIGRDC2 acct:IBRIX2$ sc:2 mc: IBRIX2 neg: 400701ff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_auth_2(800)
>  init_q_auth_2: 800
>[2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_log_info(1411)
>  make_log_info 1411
>[2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_q_auth_2(806)
>  init_q_auth_2: 806
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 net_io_q_auth_2 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_log_info 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0000 undoc_buffer: 00000001
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000004 smb_io_unistr2 unistr2
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0004 uni_max_len: 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0008 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              000c uni_str_len: 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>              0010 buffer     : \.\.T.I.G.R.D.C.2...
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000024 smb_io_unistr2 unistr2
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0024 uni_max_len: 00000008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0028 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              002c uni_str_len: 00000008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>              0030 buffer     : I.B.R.I.X.2.$...
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0040 sec_chan: 0002
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000042 smb_io_unistr2 unistr2
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0044 uni_max_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0048 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              004c uni_str_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>              0050 buffer     : I.B.R.I.X.2...
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      00005e smb_io_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          005e data: 9e e1 3a bf be dd 7d 74 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000066 net_io_neg_flags 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0068 neg_flags: 400701ff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr    
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0084
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000009
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 0000006c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0016 opnum     : 000f
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=214
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=7
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  132 (0x84)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=  132 (0x84)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32771 (0x8003)
>  smb_bcc=147
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 84  00 00 00 09 00 00 00 6C  ........ .......l
>  [020] 00 00 00 00 00 0F 00 01  00 00 00 0A 00 00 00 00  ........ ........
>  [030] 00 00 00 0A 00 00 00 5C  00 5C 00 54 00 49 00 47  .......\ .\.T.I.G
>  [040] 00 52 00 44 00 43 00 32  00 00 00 08 00 00 00 00  .R.D.C.2 ........
>  [050] 00 00 00 08 00 00 00 49  00 42 00 52 00 49 00 58  .......I .B.R.I.X
>  [060] 00 32 00 24 00 00 00 02  00 00 00 07 00 00 00 00  .2.$.... ........
>  [070] 00 00 00 07 00 00 00 49  00 42 00 52 00 49 00 58  .......I .B.R.I.X
>  [080] 00 32 00 00 00 9E E1 3A  BF BE DD 7D 74 00 00 FF  .2.....: ...}t...
>  [090] 01 07 40                                          ..@ 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,218)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,218) wrote 218
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 96
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 84 05 00 02 03 10 00 00  00 28 00 00 00 09 00 00  ........ .(......
>  [010] 00 10 00 00 00 00 00 00  00 8A F5 6A 6D 74 49 D9  ........ ...jmtI.
>  [020] 58 FF 01 07 40 00 00 00  00                       X...@... .
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 84 05 00 02 03 10 00 00  00 28 00 00 00 09 00 00  ........ .(......
>  [010] 00 10 00 00 00 00 00 00  00 8A F5 6A 6D 74 49 D9  ........ ...jmtI.
>  [020] 58 FF 01 07 40 00 00 00  00                       X...@... .
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0028
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 00000009
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 00000010
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0016 cancel_ct : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0017 reserved  : 00
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577)
>  cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 40 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8003 returned 32 bytes.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 net_io_r_auth_2 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          0000 data: 8a f5 6a 6d 74 49 d9 58 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000008 net_io_neg_flags 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0008 neg_flags: 400701ff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762)
>      000c status: NT_STATUS_OK
>[2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_check(259)
>  creds_client_check: credentials check OK.
>[2006/06/23 12:38:22, 5] rpc_client/cli_netlogon.c:rpccli_netlogon_setup_creds(345)
>  rpccli_netlogon_setup_creds: server TIGRDC2 credential chain established.
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,108)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,108) wrote 108
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 103
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=8
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  103 (0x67)
>  smb_vwv[ 2]= 1024 (0x400)
>  smb_vwv[ 3]=  384 (0x180)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=   16 (0x10)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044)
>  Bind RPC Pipe[8004]: \NETLOGON auth_type 2, auth_level 6
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647)
>  Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB  EF 00 01 23 45 67 CF FB  xV4.4... ...#Eg..
>  [010] 01 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650)
>  Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11  9F E8 08 00 2B 10 48 60  .]...... ....+.H`
>  [010] 02 00 00 00                                       .... 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_auth_schannel_neg schannel_neg
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0000 type1: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0004 type2: 00000003
>[2006/06/23 12:38:22, 6] lib/util.c:dump_data(2058)
>  [000] 54 49 47 52                                       TIGR 
>[2006/06/23 12:38:22, 6] lib/util.c:dump_data(2058)
>  [000] 49 42 52 49 58 32                                 IBRIX2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0064
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0014
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_rb 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0018 num_contexts: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      001c context_id  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      001e num_transfer_syntaxes: 01
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      00001f smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000020 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0020 data   : 12345678
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0024 data   : 1234
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0026 data   : abcd
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0028 data   : ef 00 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              002a data   : 01 23 45 67 cf fb 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0030 version: 00000001
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000034 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000034 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0034 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0038 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              003a data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003c data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003e data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0044 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000048 smb_io_rpc_hdr_auth hdr_auth
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0048 auth_type    : 44
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0049 auth_level   : 06
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      004a auth_pad_len : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      004b auth_reserved: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      004c auth_context_id: 00000001
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=182
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=9
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  100 (0x64)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=  100 (0x64)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32772 (0x8004)
>  smb_bcc=115
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 0B 03 10 00 00 00 64  00 14 00 0A 00 00 00 B8  .......d ........
>  [020] 10 B8 10 00 00 00 00 01  00 00 00 00 00 01 00 78  ........ .......x
>  [030] 56 34 12 34 12 CD AB EF  00 01 23 45 67 CF FB 01  V4.4.... ..#Eg...
>  [040] 00 00 00 04 5D 88 8A EB  1C C9 11 9F E8 08 00 2B  ....]... .......+
>  [050] 10 48 60 02 00 00 00 44  06 00 00 01 00 00 00 00  .H`....D ........
>  [060] 00 00 00 03 00 00 00 54  49 47 52 00 49 42 52 49  .......T IGR.IBRI
>  [070] 58 32 00                                          X2. 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,186)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,186) wrote 186
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 144
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=9
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   88 (0x58)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=89
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 64 05 00 0C 03 10 00 00  00 58 00 0C 00 0A 00 00  d....... .X......
>  [010] 00 B8 10 B8 10 13 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 5C  00 01 00 00 00 00 00 00  \lsass.\ ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00 44 06 00  00 01 00 00 00 01 00 00  `....D.. ........
>  [050] 00 00 00 00 00 00 00 00  00                       ........ .
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=9
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   88 (0x58)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=89
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 64 05 00 0C 03 10 00 00  00 58 00 0C 00 0A 00 00  d....... .X......
>  [010] 00 B8 10 B8 10 13 CB 06  01 0C 00 5C 50 49 50 45  ........ ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 5C  00 01 00 00 00 00 00 00  \lsass.\ ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00 44 06 00  00 01 00 00 00 01 00 00  `....D.. ........
>  [050] 00 00 00 00 00 00 00 00  00                       ........ .
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0058
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 0000000a
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 88 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 returned 88 bytes.
>[2006/06/23 12:38:22, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
>  rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 bind request returned ok.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 0c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0058
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_ba 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_rpc_hdr_bba 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0010 max_tsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0012 max_rsize: 10b8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 assoc_gid: 0106cb13
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000018 smb_io_rpc_addr_str 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0018 len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          001a str: \PIPE\lsass.
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000026 smb_io_rpc_results 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>          0028 num_results: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002c result     : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          002e reason     : 0000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000030 smb_io_rpc_iface 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000030 smb_io_uuid uuid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0030 data   : 8a885d04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0034 data   : 1ceb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0036 data   : 11c9
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0038 data   : 9f e8 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              003a data   : 08 00 2b 10 48 60 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0040 version: 00000002
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:check_bind_response(1701)
>  check_bind_response: accepted!
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2509)
>  cli_rpc_pipe_open_schannel_with_key: opened pipe \NETLOGON to machine TIGRDC2 for domain TIGR and bound using schannel.
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,45)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,45) wrote 45
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=10
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383)
>  cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(82)
>  	sequence = 0x449c1900
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(84)
>  	seed:        9EE13ABFBEDD7D74
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(89)
>  	seed+seq   9EFAD603BEDD7D74
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(93)
>  	CLIENT      69D37631FCF9363E
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(98)
>  	seed+seq+1   9FFAD603BEDD7D74
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_step(102)
>  	SERVER      DA517008DED79485
>[2006/06/23 12:38:22, 5] libsmb/credentials.c:creds_reseed(179)
>  cred_reseed: seed 9FFAD603BEDD7D74
>[2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_id_info2(1181)
>  init_id_info2: 1181
>[2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_logon_id(1590)
>  make_logon_id: 1590
>[2006/06/23 12:38:22, 5] rpc_parse/parse_net.c:init_sam_info(1275)
>  init_sam_info: 1275
>[2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_clnt_info2(1505)
>  make_clnt_info: 1505
>[2006/06/23 12:38:22, 5] rpc_parse/parse_misc.c:init_clnt_srv(1350)
>  init_clnt_srv: 1350
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 net_io_q_sam_logon 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000000 smb_io_sam_info 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000000 smb_io_clnt_info2 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000000 smb_io_clnt_srv 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0000 undoc_buffer : 00000001
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000004 smb_io_unistr2 unistr2
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0004 uni_max_len: 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0008 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      000c uni_str_len: 0000000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>                      0010 buffer     : \.\.T.I.G.R.D.C.2...
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0024 undoc_buffer2: 00000001
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000028 smb_io_unistr2 unistr2
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0028 uni_max_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      002c offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0030 uni_str_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>                      0034 buffer     : I.B.R.I.X.2...
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0044 ptr_cred: 00000001
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000048 smb_io_cred 
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000048 smb_io_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>                      0048 data: 69 d3 76 31 fc f9 36 3e 
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000050 smb_io_utime 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0050 time: 449c1900
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0054 ptr_rtn_cred : 00000001
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000058 smb_io_cred 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000058 smb_io_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>                  0058 data: 00 00 00 00 00 00 00 00 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000060 smb_io_utime 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0060 time: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0064 logon_level  : 0002
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000066 smb_io_sam_info logon_info
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0066 switch_value : 0002
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000068 net_io_id_info2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0068 ptr_id_info2: 00000001
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  00006c smb_io_unihdr unihdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      006c uni_str_len: 0008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      006e uni_max_len: 0008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0070 buffer     : 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0074 param_ctrl: 00000820
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000078 smb_io_logon_id 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0078 low : 0000dead
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      007c high: 0000beef
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000080 smb_io_unihdr unihdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      0080 uni_str_len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      0082 uni_max_len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0084 buffer     : 00000001
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000088 smb_io_unihdr unihdr
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      0088 uni_str_len: 0018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      008a uni_max_len: 0018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      008c buffer     : 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>                  0090 lm_chal: c8 6d e8 54 4d 53 61 f1 
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000098 smb_io_strhdr hdr_nt_chal_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      0098 str_str_len: 0018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      009a str_max_len: 0018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      009c buffer     : 00000001
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0000a0 smb_io_strhdr hdr_lm_chal_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      00a0 str_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>                      00a2 str_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00a4 buffer     : 00000000
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0000a8 smb_io_unistr2 uni_domain_name
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00a8 uni_max_len: 00000004
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00ac offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00b0 uni_str_len: 00000004
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>                      00b4 buffer     : T.I.G.R.
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0000bc smb_io_unistr2 uni_user_name  
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00bc uni_max_len: 00000006
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00c0 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00c4 uni_str_len: 00000006
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>                      00c8 buffer     : r.a.j.e.e.v.
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0000d4 smb_io_unistr2 uni_wksta_name 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00d4 uni_max_len: 0000000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00d8 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00dc uni_str_len: 0000000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>                      00e0 buffer     : \.\.K.R.E.A.P.E.R.-.X.P.
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0000f8 smb_io_string2 nt_chal_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00f8 str_max_len: 00000018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      00fc offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                      0100 str_str_len: 00000018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_string2(1064)
>                      0104 buffer     : ....5..]".:....D.wT.....
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  00011c smb_io_string2 - NULL lm_chal_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      011c validation_level: 0003
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr hdr    
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0160
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0020
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 0000000b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 0000011e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0016 opnum     : 0002
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000138 smb_io_rpc_hdr_auth hdr_auth
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0138 auth_type    : 44
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0139 auth_level   : 06
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      013a auth_pad_len : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      013b auth_reserved: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      013c auth_context_id: 00000001
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:add_schannel_auth_footer(1357)
>  add_schannel_auth_footer: SCHANNEL seq_num=0
>[2006/06/23 12:38:22, 10] rpc_parse/parse_prs.c:schannel_encode(1571)
>  SCHANNEL: schannel_encode seq_num=0 data_len=288
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000140 smb_io_rpc_auth_schannel_chk 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0140 sig  : 77 00 7a 00 ff ff 00 00 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0148 seq_num: 86 d4 77 38 42 04 0f d7 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0150 packet_digest: 21 a2 0a 50 c8 3f 19 f0 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0158 confounder: e5 4e 02 11 d4 ee ea e7 
>[2006/06/23 12:38:22, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=434
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=11
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  352 (0x160)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=  352 (0x160)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=32772 (0x8004)
>  smb_bcc=367
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 60  01 20 00 0B 00 00 00 1E  .......` . ......
>  [020] 01 00 00 00 00 02 00 B6  D5 2B A1 7A 29 50 9C 51  ........ .+.z)P.Q
>  [030] B4 46 39 2E CF 21 E6 90  2D 90 30 C4 83 67 68 B6  .F9..!.. -.0..gh.
>  [040] 06 7C 30 01 CA 5D E2 6B  99 83 CA A9 C1 F5 CD CF  .|0..].k ........
>  [050] 26 6D 75 E7 DC 02 38 B8  52 D5 51 FF 5A E6 6F 54  &mu...8. R.Q.Z.oT
>  [060] C4 71 48 31 3D 01 BC 25  ED 20 51 A6 0D C6 49 0E  .qH1=..% . Q...I.
>  [070] 37 57 9F 8B C3 85 33 71  5E A9 75 A1 9D 5E 49 D5  7W....3q ^.u..^I.
>  [080] 7F 12 8B 00 BF 5D BF AB  DD FD C4 82 DA C6 83 79  .....].. .......y
>  [090] 6F EE FD 26 EB 41 F1 62  9D E9 58 7D 27 03 52 00  o..&.A.b ..X}'.R.
>  [0A0] 4D 91 55 6B AB 33 FC 61  77 89 C4 C6 0A F9 95 0E  M.Uk.3.a w.......
>  [0B0] 48 DC 4D F9 D5 68 45 E3  DC 04 F4 86 1F 3D 1D 44  H.M..hE. .....=.D
>  [0C0] 55 D5 0C 8F CF 4E EF 89  32 A1 FF 33 77 E9 93 CC  U....N.. 2..3w...
>  [0D0] 77 4C AC 9B 03 28 43 E1  4A 08 C2 8A 52 D7 66 45  wL...(C. J...R.fE
>  [0E0] 15 0C A3 58 B7 B7 95 60  08 12 35 DA 68 E2 9C 3E  ...X...` ..5.h..>
>  [0F0] 2F E3 15 1F 1C 66 9F 38  1E 38 53 4C 4B 98 49 FA  /....f.8 .8SLK.I.
>  [100] 47 23 6A 3B D4 3F 7A 4D  5F 35 9C 94 6E 43 9B DB  G#j;.?zM _5..nC..
>  [110] 12 5A E4 5D D1 90 61 6F  5D 9A 2A C6 C8 59 9B 5C  .Z.]..ao ].*..Y.\
>  [120] E4 22 EA E2 C5 13 15 D3  A1 37 D9 93 B6 31 28 4F  ."...... .7...1(O
>  [130] 26 E6 55 9A CA 7D 26 6D  35 F1 A7 80 43 F6 FC 67  &.U..}&m 5...C..g
>  [140] 6D 84 7D 93 92 29 A2 44  06 02 00 01 00 00 00 77  m.}..).D .......w
>  [150] 00 7A 00 FF FF 00 00 86  D4 77 38 42 04 0F D7 21  .z...... .w8B...!
>  [160] A2 0A 50 C8 3F 19 F0 E5  4E 02 11 D4 EE EA E7     ..P.?... N......
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,438)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,438) wrote 438
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 1144
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=1144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=11
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1088 (0x440)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 1088 (0x440)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=1089
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 60 05 00 02 03 10 00 00  00 40 04 20 00 0B 00 00  `....... .@. ....
>  [010] 00 F8 03 00 00 00 00 00  00 74 38 2A A1 3D 3F F1  ........ .t8*.=?.
>  [020] 05 A3 57 86 50 E5 D6 19  1D A5 DC 37 45 A7 4E FC  ..W.P... ...7E.N.
>  [030] 1C 53 A6 AE 0C 76 6B 25  28 EF 34 EB 34 8F 08 72  .S...vk% (.4.4..r
>  [040] 25 0C DE A6 62 EC 1A 18  5B B0 C8 CC 75 C5 D8 92  %...b... [...u...
>  [050] C2 41 B1 D4 58 22 82 15  5E 0C 09 39 B1 50 27 95  .A..X".. ^..9.P'.
>  [060] 8E E0 52 54 38 37 D7 6C  B3 D0 8B 0A 95 6A DC 08  ..RT87.l .....j..
>  [070] 61 94 D6 8D B5 2B 1F 76  0E 52 37 B0 19 BF 7D F5  a....+.v .R7...}.
>  [080] 33 1B B1 27 97 F3 04 C4  9F DC 03 65 6F 49 48 F0  3..'.... ...eoIH.
>  [090] 12 D1 66 4C 34 54 28 C2  51 92 93 66 18 E8 AC E4  ..fL4T(. Q..f....
>  [0A0] 11 D0 FD 27 3B D1 F8 6A  06 E3 2C F9 3A DB A6 FE  ...';..j ..,.:...
>  [0B0] 78 4F F0 8F AB 7D 42 C5  3E 11 2D 4B F7 68 71 7D  xO...}B. >.-K.hq}
>  [0C0] 01 B3 46 46 87 B5 DD A4  A9 BF A0 30 9C A0 CE 8F  ..FF.... ...0....
>  [0D0] 02 81 E6 C1 A6 DA 0E 50  52 71 63 DB 27 08 2E 78  .......P Rqc.'..x
>  [0E0] 17 5B F5 E9 39 07 42 3F  E1 1B 92 9E 0A E6 2F AA  .[..9.B? ....../.
>  [0F0] D6 9C 07 22 1E D8 38 A7  9A 8D F0 EC 5F 64 68 18  ..."..8. ...._dh.
>  [100] 08 95 DF 67 21 A0 5F 78  01 B2 F3 C0 50 7D B9 AC  ...g!._x ....P}..
>  [110] 9B F7 9F 45 83 A9 CB 49  C9 07 5C 25 05 51 D1 C1  ...E...I ..\%.Q..
>  [120] 12 DA 78 96 76 7E 7C C2  D9 F1 8D 76 A7 0C 02 99  ..x.v~|. ...v....
>  [130] 86 16 15 8F 22 38 7F 6B  E1 D8 2E 04 58 D5 6D 09  ...."8.k ....X.m.
>  [140] 98 26 39 AB 32 4A BC CA  93 D5 EA B0 8C D2 D6 C7  .&9.2J.. ........
>  [150] 38 1A F2 19 A0 29 2E 5C  C5 D6 13 34 2B CD E5 B2  8....).\ ...4+...
>  [160] 41 33 C0 E3 5E 6F 06 BD  00 3D F6 43 8E D5 AF AF  A3..^o.. .=.C....
>  [170] 79 EF 51 98 14 01 27 10  B0 DD 4E 51 D1 B8 07 AD  y.Q...'. ..NQ....
>  [180] 3D E1 B7 B3 AF 65 65 46  51 82 F5 7D 88 12 C4 F7  =....eeF Q..}....
>  [190] AA 9E E7 A0 B1 04 D0 42  D1 C6 3C 84 73 F0 28 7B  .......B ..<.s.({
>  [1A0] FE BA AC 15 0D AA 6C 34  69 8A F6 FA 2A AF 1F D7  ......l4 i...*...
>  [1B0] 82 AC 53 D4 A5 F8 2F D3  73 2E 4F 8C 05 EA 96 3C  ..S.../. s.O....<
>  [1C0] 3D BB 19 BD CD 97 08 8F  28 7C AC EE 7A CC 13 92  =....... (|..z...
>  [1D0] 3F 7D 7A 8E 4A 94 21 7E  F4 CA EC 7B 53 37 91 B3  ?}z.J.!~ ...{S7..
>  [1E0] 72 DF D6 48 58 93 6A 91  51 D7 D6 26 38 50 E2 5A  r..HX.j. Q..&8P.Z
>  [1F0] FB B6 C1 BC AB A2 71 4F  9D 10 BF 31 B5 BE E2 1F  ......qO ...1....
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=1144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=11
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1088 (0x440)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 1088 (0x440)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=1089
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 60 05 00 02 03 10 00 00  00 40 04 20 00 0B 00 00  `....... .@. ....
>  [010] 00 F8 03 00 00 00 00 00  00 74 38 2A A1 3D 3F F1  ........ .t8*.=?.
>  [020] 05 A3 57 86 50 E5 D6 19  1D A5 DC 37 45 A7 4E FC  ..W.P... ...7E.N.
>  [030] 1C 53 A6 AE 0C 76 6B 25  28 EF 34 EB 34 8F 08 72  .S...vk% (.4.4..r
>  [040] 25 0C DE A6 62 EC 1A 18  5B B0 C8 CC 75 C5 D8 92  %...b... [...u...
>  [050] C2 41 B1 D4 58 22 82 15  5E 0C 09 39 B1 50 27 95  .A..X".. ^..9.P'.
>  [060] 8E E0 52 54 38 37 D7 6C  B3 D0 8B 0A 95 6A DC 08  ..RT87.l .....j..
>  [070] 61 94 D6 8D B5 2B 1F 76  0E 52 37 B0 19 BF 7D F5  a....+.v .R7...}.
>  [080] 33 1B B1 27 97 F3 04 C4  9F DC 03 65 6F 49 48 F0  3..'.... ...eoIH.
>  [090] 12 D1 66 4C 34 54 28 C2  51 92 93 66 18 E8 AC E4  ..fL4T(. Q..f....
>  [0A0] 11 D0 FD 27 3B D1 F8 6A  06 E3 2C F9 3A DB A6 FE  ...';..j ..,.:...
>  [0B0] 78 4F F0 8F AB 7D 42 C5  3E 11 2D 4B F7 68 71 7D  xO...}B. >.-K.hq}
>  [0C0] 01 B3 46 46 87 B5 DD A4  A9 BF A0 30 9C A0 CE 8F  ..FF.... ...0....
>  [0D0] 02 81 E6 C1 A6 DA 0E 50  52 71 63 DB 27 08 2E 78  .......P Rqc.'..x
>  [0E0] 17 5B F5 E9 39 07 42 3F  E1 1B 92 9E 0A E6 2F AA  .[..9.B? ....../.
>  [0F0] D6 9C 07 22 1E D8 38 A7  9A 8D F0 EC 5F 64 68 18  ..."..8. ...._dh.
>  [100] 08 95 DF 67 21 A0 5F 78  01 B2 F3 C0 50 7D B9 AC  ...g!._x ....P}..
>  [110] 9B F7 9F 45 83 A9 CB 49  C9 07 5C 25 05 51 D1 C1  ...E...I ..\%.Q..
>  [120] 12 DA 78 96 76 7E 7C C2  D9 F1 8D 76 A7 0C 02 99  ..x.v~|. ...v....
>  [130] 86 16 15 8F 22 38 7F 6B  E1 D8 2E 04 58 D5 6D 09  ...."8.k ....X.m.
>  [140] 98 26 39 AB 32 4A BC CA  93 D5 EA B0 8C D2 D6 C7  .&9.2J.. ........
>  [150] 38 1A F2 19 A0 29 2E 5C  C5 D6 13 34 2B CD E5 B2  8....).\ ...4+...
>  [160] 41 33 C0 E3 5E 6F 06 BD  00 3D F6 43 8E D5 AF AF  A3..^o.. .=.C....
>  [170] 79 EF 51 98 14 01 27 10  B0 DD 4E 51 D1 B8 07 AD  y.Q...'. ..NQ....
>  [180] 3D E1 B7 B3 AF 65 65 46  51 82 F5 7D 88 12 C4 F7  =....eeF Q..}....
>  [190] AA 9E E7 A0 B1 04 D0 42  D1 C6 3C 84 73 F0 28 7B  .......B ..<.s.({
>  [1A0] FE BA AC 15 0D AA 6C 34  69 8A F6 FA 2A AF 1F D7  ......l4 i...*...
>  [1B0] 82 AC 53 D4 A5 F8 2F D3  73 2E 4F 8C 05 EA 96 3C  ..S.../. s.O....<
>  [1C0] 3D BB 19 BD CD 97 08 8F  28 7C AC EE 7A CC 13 92  =....... (|..z...
>  [1D0] 3F 7D 7A 8E 4A 94 21 7E  F4 CA EC 7B 53 37 91 B3  ?}z.J.!~ ...{S7..
>  [1E0] 72 DF D6 48 58 93 6A 91  51 D7 D6 26 38 50 E2 5A  r..HX.j. Q..&8P.Z
>  [1F0] FB B6 C1 BC AB A2 71 4F  9D 10 BF 31 B5 BE E2 1F  ......qO ...1....
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0000 major     : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0001 minor     : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0002 pkt_type  : 02
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0003 flags     : 03
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0004 pack_type0: 10
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0005 pack_type1: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0006 pack_type2: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0007 pack_type3: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0008 frag_len  : 0440
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      000a auth_len  : 0020
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      000c call_id   : 0000000b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0010 alloc_hint: 000003f8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0014 context_id: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0016 cancel_ct : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0017 reserved  : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000418 smb_io_rpc_hdr_auth hdr_auth
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0418 auth_type    : 44
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      0419 auth_level   : 06
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      041a auth_pad_len : 08
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>      041b auth_reserved: 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      041c auth_context_id: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000420 smb_io_rpc_auth_schannel_chk 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0420 sig  : 77 00 7a 00 ff ff 00 00 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0428 seq_num: d2 7f 7c d6 45 3d 79 6c 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0430 packet_digest: 37 f3 d0 45 d5 51 e3 07 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0438 confounder: 74 6b b2 24 43 fb 22 89 
>[2006/06/23 12:38:22, 10] rpc_parse/parse_prs.c:schannel_decode(1648)
>  SCHANNEL: schannel_decode seq_num=1 data_len=1024
>[2006/06/23 12:38:22, 10] rpc_parse/parse_prs.c:schannel_decode(1668)
>  SCHANNEL: schannel_decode seq_num=1 data_len=1024
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577)
>  cli_pipe_validate_current_pdu: got pdu len 1088, data_len 1016, ss_len 8
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
>  rpc_api_pipe: got PDU len of 1088 at offset 0
>[2006/06/23 12:38:22, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894)
>  rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x8004 returned 2032 bytes.
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000000 net_io_r_sam_logon 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0000 buffer_creds: 00020000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000004 smb_io_cred 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000004 smb_io_chal 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>              0004 data: da 51 70 08 de d7 94 85 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          00000c smb_io_utime 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              000c time: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0010 switch_value: 0003
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000014 net_io_user_info3 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 ptr_user_info : 00020004
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000018 smb_io_time logon time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0018 low : d2ca8713
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              001c high: 01c696dc
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000020 smb_io_time logoff time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0020 low : ffffffff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0024 high: 7fffffff
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000028 smb_io_time kickoff time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0028 low : ffffffff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              002c high: 7fffffff
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000030 smb_io_time last set time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0030 low : 09fac924
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0034 high: 01c6868d
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000038 smb_io_time can change time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0038 low : 09fac924
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              003c high: 01c6868d
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000040 smb_io_time must change time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0040 low : ffffffff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0044 high: 7fffffff
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000048 smb_io_unihdr hdr_user_name
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0048 uni_str_len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              004a uni_max_len: 000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              004c buffer     : 00020008
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000050 smb_io_unihdr hdr_full_name
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0050 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0052 uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0054 buffer     : 00000000
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000058 smb_io_unihdr hdr_logon_script
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0058 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              005a uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              005c buffer     : 00000000
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000060 smb_io_unihdr hdr_profile_path
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0060 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0062 uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0064 buffer     : 00000000
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000068 smb_io_unihdr hdr_home_dir
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0068 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              006a uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              006c buffer     : 00000000
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000070 smb_io_unihdr hdr_dir_drive
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0070 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              0072 uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0074 buffer     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0078 logon_count   : 08c3
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          007a bad_pw_count  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          007c user_rid      : 00000c2a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0080 group_rid     : 00000201
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0084 num_groups    : 0000000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0088 buffer_groups : 0002000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          008c user_flgs     : 00000120
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          0090 user_sess_key: fd 24 b7 48 99 3d f9 3a a0 c6 b3 b7 9f f7 e1 1c 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000a0 smb_io_unihdr hdr_logon_srv
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              00a0 uni_str_len: 000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              00a2 uni_max_len: 0010
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              00a4 buffer     : 00020010
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000a8 smb_io_unihdr hdr_logon_dom
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              00a8 uni_str_len: 0008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>              00aa uni_max_len: 000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              00ac buffer     : 00020014
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00b0 buffer_dom_id : 00020018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>          00b4 lm_sess_key: f3 14 5f 27 96 6a 99 df 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00bc acct_flags : 00000210
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00c0 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00c4 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00c8 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00cc unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00d0 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00d4 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00d8 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00dc num_other_sids: 0000000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00e0 buffer_other_sids: 0002001c
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000e4 smb_io_unistr2 uni_user_name
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              00e4 uni_max_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              00e8 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              00ec uni_str_len: 00000006
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>              00f0 buffer     : r.a.j.e.e.v.
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000fc smb_io_unistr2 - NULL uni_full_name
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000fc smb_io_unistr2 - NULL uni_logon_script
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000fc smb_io_unistr2 - NULL uni_profile_path
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000fc smb_io_unistr2 - NULL uni_home_dir
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0000fc smb_io_unistr2 - NULL uni_dir_drive
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00fc num_groups2   : 0000000e
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000100 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0100 g_rid: 0000128a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0104 attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000108 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0108 g_rid: 0000053c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              010c attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000110 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0110 g_rid: 00001bdb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0114 attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000118 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0118 g_rid: 00000d53
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              011c attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000120 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0120 g_rid: 00000fa7
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0124 attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000128 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0128 g_rid: 00000fa8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              012c attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000130 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0130 g_rid: 0000169a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0134 attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000138 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0138 g_rid: 0000055e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              013c attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000140 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0140 g_rid: 00000555
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0144 attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000148 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0148 g_rid: 00000540
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              014c attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000150 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0150 g_rid: 00000fdd
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0154 attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000158 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0158 g_rid: 00000201
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              015c attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000160 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0160 g_rid: 0000055c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0164 attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000168 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0168 g_rid: 0000051b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              016c attr : 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000170 smb_io_unistr2 uni_logon_srv
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0170 uni_max_len: 00000008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0174 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0178 uni_str_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>              017c buffer     : T.I.G.R.D.C.2.
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          00018a smb_io_unistr2 uni_logon_dom
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              018c uni_max_len: 00000005
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0190 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0194 uni_str_len: 00000004
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>              0198 buffer     : T.I.G.R.
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0001a0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01a0 num_auths: 00000004
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0001a4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01a4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01a5 num_auths  : 04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01a6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01a7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01a8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01a9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01aa id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  01ab id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  01ac sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01bc num_other_sids: 0000000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01c0 sid_ptr: 00020020
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01c4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01c8 sid_ptr: 00020024
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01cc attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01d0 sid_ptr: 00020028
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01d4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01d8 sid_ptr: 0002002c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01dc attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01e0 sid_ptr: 00020030
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01e4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01e8 sid_ptr: 00020034
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01ec attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01f0 sid_ptr: 00020038
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01f4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01f8 sid_ptr: 0002003c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              01fc attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0200 sid_ptr: 00020040
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0204 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0208 sid_ptr: 00020044
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              020c attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0210 sid_ptr: 00020048
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0214 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0218 sid_ptr: 0002004c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              021c attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0220 sid_ptr: 00020050
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0224 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0228 sid_ptr: 00020054
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              022c attribute: 00000007
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000230 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0230 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000234 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0234 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0235 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0236 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0237 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0238 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0239 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      023a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      023b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      023c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000250 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0250 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000254 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0254 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0255 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0256 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0257 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0258 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0259 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      025a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      025b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      025c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000270 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0270 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000274 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0274 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0275 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0276 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0277 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0278 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0279 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      027a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      027b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      027c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000290 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0290 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000294 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0294 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0295 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0296 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0297 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0298 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0299 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      029a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      029b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      029c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0002b0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  02b0 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0002b4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02b4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02b5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02b6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02b7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02b8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02b9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02ba id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02bb id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      02bc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0002d0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  02d0 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0002d4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02d4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02d5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02d6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02d7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02d8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02d9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02da id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02db id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      02dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0002f0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  02f0 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0002f4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02f4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02f5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02f6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02f7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02f8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02f9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02fa id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      02fb id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      02fc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000310 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0310 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000314 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0314 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0315 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0316 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0317 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0318 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0319 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      031a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      031b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      031c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000330 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0330 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000334 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0334 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0335 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0336 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0337 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0338 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0339 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      033a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      033b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      033c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000350 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0350 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000354 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0354 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0355 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0356 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0357 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0358 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0359 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      035a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      035b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      035c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000370 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0370 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000374 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0374 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0375 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0376 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0377 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0378 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0379 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      037a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      037b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      037c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000390 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  0390 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  000394 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0394 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0395 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0396 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0397 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0398 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      0399 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      039a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      039b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      039c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0003b0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  03b0 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0003b4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03b4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03b5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03b6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03b7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03b8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03b9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03ba id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03bb id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      03bc sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed 
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0003d0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>                  03d0 num_auths: 00000005
>[2006/06/23 12:38:22, 9] rpc_parse/parse_prs.c:prs_debug(84)
>                  0003d4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03d4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03d5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03d6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03d7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03d8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03d9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03da id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                      03db id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                      03dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      03f0 auth_resp   : 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_ntstatus(762)
>      03f4 status      : NT_STATUS_OK
>[2006/06/23 12:38:22, 10] libsmb/credentials.c:creds_client_check(259)
>  creds_client_check: credentials check OK.
>[2006/06/23 12:38:22, 10] passdb/secrets.c:secrets_named_mutex_release(821)
>  secrets_named_mutex: released mutex for TIGRDC2
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290)
>  Finding user TIGR\rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234)
>  Trying _Get_Pwnam(), username as lowercase is tigr\rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(242)
>  Trying _Get_Pwnam(), username as given is TIGR\rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(252)
>  Trying _Get_Pwnam(), username as uppercase is TIGR\RAJEEV
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(261)
>  Checking combinations of 0 uppercase letters in tigr\rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267)
>  Get_Pwnam_internals didn't find user [TIGR\rajeev]!
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290)
>  Finding user rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234)
>  Trying _Get_Pwnam(), username as lowercase is rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267)
>  Get_Pwnam_internals did find user [rajeev]!
>[2006/06/23 12:38:22, 5] auth/auth_util.c:fill_sam_account(1118)
>  fill_sam_account: located username was [rajeev]
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_username(617)
>  pdb_set_username: setting username rajeev, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_fullname(698)
>  pdb_set_full_name: setting full name Rajeev Karamchedu, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833)
>  pdb_set_unix_homedir: setting home dir /home/rajeev, was NULL
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
>  pdb_set_domain: setting domain IBRIX2, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544)
>  pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036
>[2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036 from rid 4036
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580)
>  pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081
>[2006/06/23 12:38:22, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
>  pdb_set_group_sid_from_rid:
>  	setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081 from rid 1081
>[2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359)
>  Home server: ibrix2
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
>  pdb_set_profile_path: setting profile path \\ibrix2\rajeev\profile, was 
>[2006/06/23 12:38:22, 4] lib/substitute.c:automount_server(359)
>  Home server: ibrix2
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
>  pdb_set_homedir: setting home dir \\ibrix2\rajeev, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725)
>  pdb_set_logon_script: setting logon script , was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671)
>  pdb_set_nt_username: setting nt username rajeev, was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_username(617)
>  pdb_set_username: setting username rajeev, was rajeev
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
>  pdb_set_domain: setting domain TIGR, was IBRIX2
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544)
>  pdb_set_user_sid: setting user sid S-1-5-21-2867130070-3872911017-3508780997-3114
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580)
>  pdb_set_group_sid: setting group sid S-1-5-21-2867130070-3872911017-3508780997-513
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_fullname(698)
>  pdb_set_full_name: setting full name , was Rajeev Karamchedu
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725)
>  pdb_set_logon_script: setting logon script , was 
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
>  pdb_set_profile_path: setting profile path , was \\ibrix2\rajeev\profile
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
>  pdb_set_homedir: setting home dir , was \\ibrix2\rajeev
>[2006/06/23 12:38:22, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779)
>  pdb_set_dir_drive: setting dir drive , was 
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 10] lib/system_smbd.c:sys_getgrouplist(167)
>  sys_getgrouplist: user [rajeev]
>[2006/06/23 12:38:22, 10] lib/system_smbd.c:sys_getgrouplist(176)
>  sys_getgrouplist(): disabled winbindd for group lookup [user == rajeev]
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 8] lib/system_smbd.c:remove_duplicate_gids(49)
>  remove_duplicate_gids: Enter 14 gids
>[2006/06/23 12:38:22, 8] lib/system_smbd.c:remove_duplicate_gids(67)
>  remove_duplicate_gids: Exit 13 gids
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081
>[2006/06/23 12:38:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267)
>  fetch sid from gid cache 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 10] passdb/passdb.c:local_gid_to_sid(1245)
>  local_gid_to_sid: Fall back to algorithmic mapping: 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051
>[2006/06/23 12:38:22, 10] passdb/lookup_sid.c:gid_to_sid(406)
>  gid_to_sid: local 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 10] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114
>  contains 45 SIDs
>  SID[  0]: S-1-5-21-2867130070-3872911017-3508780997-3114
>  SID[  1]: S-1-5-21-2867130070-3872911017-3508780997-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2867130070-3872911017-3508780997-4746
>  SID[  6]: S-1-5-21-2867130070-3872911017-3508780997-1340
>  SID[  7]: S-1-5-21-2867130070-3872911017-3508780997-7131
>  SID[  8]: S-1-5-21-2867130070-3872911017-3508780997-3411
>  SID[  9]: S-1-5-21-2867130070-3872911017-3508780997-4007
>  SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008
>  SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786
>  SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374
>  SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365
>  SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344
>  SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061
>  SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372
>  SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307
>  SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513
>  SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906
>  SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908
>  SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916
>  SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921
>  SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923
>  SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692
>  SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315
>  SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682
>  SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933
>  SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480
>  SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244
>  SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773
>  SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096
>  SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081
>  SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001
>  SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029
>  SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121
>  SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127
>  SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161
>  SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241
>  SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261
>  SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321
>  SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325
>  SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335
>  SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341
>  SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:22, 10] libsmb/samlogon_cache.c:netsamlogon_cache_store(134)
>  netsamlogon_cache_store: SID [S-1-5-21-2867130070-3872911017-3508780997-3114]
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>  0000 timestamp: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_debug(84)
>  000004 net_io_user_info3 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0004 ptr_user_info : 00020004
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000008 smb_io_time logon time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0008 low : d2ca8713
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          000c high: 01c696dc
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000010 smb_io_time logoff time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0010 low : ffffffff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0014 high: 7fffffff
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000018 smb_io_time kickoff time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0018 low : ffffffff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          001c high: 7fffffff
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000020 smb_io_time last set time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0020 low : 09fac924
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0024 high: 01c6868d
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000028 smb_io_time can change time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0028 low : 09fac924
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          002c high: 01c6868d
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000030 smb_io_time must change time
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0030 low : ffffffff
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0034 high: 7fffffff
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000038 smb_io_unihdr hdr_user_name
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0038 uni_str_len: 000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          003a uni_max_len: 000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          003c buffer     : 00020008
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000040 smb_io_unihdr hdr_full_name
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0040 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0042 uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0044 buffer     : 00000000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000048 smb_io_unihdr hdr_logon_script
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0048 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          004a uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          004c buffer     : 00000000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000050 smb_io_unihdr hdr_profile_path
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0050 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0052 uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0054 buffer     : 00000000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000058 smb_io_unihdr hdr_home_dir
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0058 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          005a uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          005c buffer     : 00000000
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000060 smb_io_unihdr hdr_dir_drive
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0060 uni_str_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0062 uni_max_len: 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0064 buffer     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      0068 logon_count   : 08c3
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>      006a bad_pw_count  : 0000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      006c user_rid      : 00000c2a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0070 group_rid     : 00000201
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0074 num_groups    : 0000000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      0078 buffer_groups : 0002000c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      007c user_flgs     : 00000120
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      0080 user_sess_key: 44 1e ea fc 4e 56 5c 63 cb e2 35 70 2d 85 ad e6 
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000090 smb_io_unihdr hdr_logon_srv
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0090 uni_str_len: 000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0092 uni_max_len: 0010
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0094 buffer     : 00020010
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000098 smb_io_unihdr hdr_logon_dom
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          0098 uni_str_len: 0008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint16(674)
>          009a uni_max_len: 000a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          009c buffer     : 00020014
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00a0 buffer_dom_id : 00020018
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8s(819)
>      00a4 lm_sess_key: 4a 2e 02 93 41 01 3c 86 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00ac acct_flags : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00b0 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00b4 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00b8 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00bc unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00c0 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00c4 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00c8 unkown: 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00cc num_other_sids: 0000000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00d0 buffer_other_sids: 0002001c
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000d4 smb_io_unistr2 uni_user_name
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00d4 uni_max_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00d8 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00dc uni_str_len: 00000006
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>          00e0 buffer     : r.a.j.e.e.v.
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000ec smb_io_unistr2 - NULL uni_full_name
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000ec smb_io_unistr2 - NULL uni_logon_script
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000ec smb_io_unistr2 - NULL uni_profile_path
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000ec smb_io_unistr2 - NULL uni_home_dir
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000ec smb_io_unistr2 - NULL uni_dir_drive
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      00ec num_groups2   : 0000000e
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000f0 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00f0 g_rid: 0000128a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00f4 attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      0000f8 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00f8 g_rid: 0000053c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          00fc attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000100 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0100 g_rid: 00001bdb
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0104 attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000108 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0108 g_rid: 00000d53
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          010c attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000110 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0110 g_rid: 00000fa7
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0114 attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000118 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0118 g_rid: 00000fa8
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          011c attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000120 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0120 g_rid: 0000169a
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0124 attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000128 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0128 g_rid: 0000055e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          012c attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000130 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0130 g_rid: 00000555
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0134 attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000138 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0138 g_rid: 00000540
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          013c attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000140 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0140 g_rid: 00000fdd
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0144 attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000148 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0148 g_rid: 00000201
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          014c attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000150 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0150 g_rid: 0000055c
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0154 attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000158 smb_io_gid 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0158 g_rid: 0000051b
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          015c attr : 00000007
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000160 smb_io_unistr2 uni_logon_srv
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0160 uni_max_len: 00000008
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0164 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0168 uni_str_len: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>          016c buffer     : T.I.G.R.D.C.2.
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      00017a smb_io_unistr2 uni_logon_dom
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          017c uni_max_len: 00000005
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0180 offset     : 00000000
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0184 uni_str_len: 00000004
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904)
>          0188 buffer     : T.I.G.R.
>[2006/06/23 12:38:22, 6] rpc_parse/parse_prs.c:prs_debug(84)
>      000190 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0190 num_auths: 00000004
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000194 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0194 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0195 num_auths  : 04
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0196 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0197 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0198 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              0199 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              019a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>              019b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>              019c sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>      01ac num_other_sids: 0000000e
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01b0 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01b4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01b8 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01bc attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01c0 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01c4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01c8 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01cc attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01d0 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01d4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01d8 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01dc attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01e0 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01e4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01e8 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01ec attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01f0 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01f4 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01f8 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          01fc attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0200 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0204 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0208 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          020c attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0210 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0214 attribute: 00000007
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          0218 sid_ptr: 00000001
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>          021c attribute: 00000007
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000220 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0220 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000224 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0224 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0225 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0226 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0227 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0228 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0229 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  022a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  022b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  022c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000240 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0240 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000244 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0244 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0245 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0246 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0247 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0248 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0249 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  024a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  024b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  024c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000260 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0260 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000264 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0264 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0265 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0266 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0267 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0268 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0269 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  026a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  026b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  026c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000280 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0280 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000284 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0284 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0285 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0286 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0287 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0288 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0289 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  028a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  028b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  028c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0002a0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              02a0 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0002a4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02a4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02a5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02a6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02a7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02a8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02a9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02aa id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02ab id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  02ac sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0002c0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              02c0 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0002c4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02c4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02c5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02c6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02c7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02c8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02c9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02ca id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02cb id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  02cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0002e0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              02e0 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0002e4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02e4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02e5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02e6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02e7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02e8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02e9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02ea id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  02eb id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  02ec sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000300 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0300 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000304 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0304 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0305 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0306 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0307 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0308 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0309 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  030a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  030b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  030c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000320 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0320 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000324 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0324 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0325 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0326 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0327 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0328 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0329 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  032a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  032b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  032c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000340 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0340 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000344 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0344 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0345 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0346 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0347 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0348 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0349 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  034a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  034b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  034c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000360 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0360 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000364 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0364 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0365 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0366 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0367 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0368 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0369 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  036a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  036b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  036c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          000380 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              0380 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              000384 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0384 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0385 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0386 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0387 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0388 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  0389 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  038a id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  038b id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  038c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0003a0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              03a0 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0003a4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03a4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03a5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03a6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03a7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03a8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03a9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03aa id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03ab id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  03ac sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed 
>[2006/06/23 12:38:22, 7] rpc_parse/parse_prs.c:prs_debug(84)
>          0003c0 smb_io_dom_sid2 
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32(703)
>              03c0 num_auths: 00000005
>[2006/06/23 12:38:22, 8] rpc_parse/parse_prs.c:prs_debug(84)
>              0003c4 smb_io_dom_sid sid
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03c4 sid_rev_num: 01
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03c5 num_auths  : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03c6 id_auth[0] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03c7 id_auth[1] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03c8 id_auth[2] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03c9 id_auth[3] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03ca id_auth[4] : 00
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint8(614)
>                  03cb id_auth[5] : 05
>[2006/06/23 12:38:22, 5] rpc_parse/parse_prs.c:prs_uint32s(959)
>                  03cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,45)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,45) wrote 45
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=12
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383)
>  cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(132)
>  write_socket(19,39)
>[2006/06/23 12:38:22, 6] libsmb/clientgen.c:write_socket(135)
>  write_socket(19,39) wrote 39
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55297
>  smb_tid=8192
>  smb_pid=23658
>  smb_uid=12288
>  smb_mid=13
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 3] auth/auth.c:check_ntlm_password(268)
>  check_ntlm_password: winbind authentication for user [rajeev] succeeded
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 3] smbd/uid.c:push_conn_ctx(393)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth.c:check_ntlm_password(294)
>  check_ntlm_password:  PAM Account for user [rajeev] succeeded
>[2006/06/23 12:38:22, 2] auth/auth.c:check_ntlm_password(307)
>  check_ntlm_password:  authentication for user [rajeev] -> [rajeev] -> [rajeev] succeeded
>[2006/06/23 12:38:22, 5] auth/auth_util.c:free_user_info(1485)
>  attempting to free (and zero) a user_info structure
>[2006/06/23 12:38:22, 10] auth/auth_util.c:free_user_info(1488)
>  structure was created for rajeev
>[2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(120)
>  Got NT session key of length 16
>[2006/06/23 12:38:22, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(127)
>  Got LM session key of length 8
>[2006/06/23 12:38:22, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(728)
>  ntlmssp_server_auth: Created NTLM2 session key.
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2006/06/23 12:38:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0x60088235
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_SEAL
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>[2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(182)
>  register_vuid: allocated vuid = 103
>[2006/06/23 12:38:22, 10] smbd/password.c:register_vuid(255)
>  register_vuid: (1518,40) rajeev rajeev TIGR guest=0
>[2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(257)
>  User name: rajeev	Real name: 
>[2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(276)
>  UNIX uid 1518 is UNIX user rajeev, and will be vuid 103
>[2006/06/23 12:38:22, 7] param/loadparm.c:lp_servicenumber(4343)
>  lp_servicenumber: couldn't find rajeev
>[2006/06/23 12:38:22, 3] smbd/password.c:register_vuid(305)
>  Adding homes service for user 'rajeev' using home directory: '/home/rajeev'
>[2006/06/23 12:38:22, 7] param/loadparm.c:lp_servicenumber(4343)
>  lp_servicenumber: couldn't find homes
>[2006/06/23 12:38:22, 6] param/loadparm.c:lp_file_list_changed(2947)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Jun 23 12:25:20 2006
>  
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=98
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=3776
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    9 (0x9)
>  smb_bcc=55
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] A1 07 30 05 A0 03 0A 01  00 55 00 6E 00 69 00 78  ..0..... .U.n.i.x
>  [010] 00 00 00 53 00 61 00 6D  00 62 00 61 00 20 00 33  ...S.a.m .b.a. .3
>  [020] 00 2E 00 30 00 2E 00 32  00 32 00 00 00 54 00 49  ...0...2 .2...T.I
>  [030] 00 47 00 52 00 00 00                              .G.R... 
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 88
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x58
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 7 of length 92
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=88
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=3840
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=45
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 5C 00 31 00 37  00 32 00 2E 00 31 00 37  .\.\.1.7 .2...1.7
>  [010] 00 2E 00 34 00 39 00 2E  00 31 00 32 00 5C 00 44  ...4.9.. .1.2.\.D
>  [020] 00 46 00 53 00 00 00 3F  3F 3F 3F 3F 00           .F.S...? ????.
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtconX (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 4] smbd/reply.c:reply_tcon_and_X(660)
>  Client requested device type [?????] for share [DFS]
>[2006/06/23 12:38:22, 5] smbd/service.c:make_connection(860)
>  making a connection to 'normal' service dfs
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290)
>  Finding user rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234)
>  Trying _Get_Pwnam(), username as lowercase is rajeev
>[2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98)
>  Got rajeev from pwnam_cache
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267)
>  Get_Pwnam_internals did find user [rajeev]!
>[2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(488)
>  Connect path is '/export/dfsroot' for service [dfs]
>[2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240)
>  get_share_security: using default secdesc for dfs
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233)
>  se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114.
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250)
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-513
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308)
>  se_access_check: access (2) granted.
>[2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216)
>  Initialising default vfs hooks
>[2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170)
>  claiming dfs 0
>[2006/06/23 12:38:22, 10] smbd/uid.c:is_share_read_only_for_user(127)
>  is_share_read_only_for_user: share dfs is read-only for unix user rajeev
>[2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240)
>  get_share_security: using default secdesc for dfs
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233)
>  se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114.
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250)
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-513
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308)
>  se_access_check: access (1) granted.
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114
>  contains 45 SIDs
>  SID[  0]: S-1-5-21-2867130070-3872911017-3508780997-3114
>  SID[  1]: S-1-5-21-2867130070-3872911017-3508780997-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2867130070-3872911017-3508780997-4746
>  SID[  6]: S-1-5-21-2867130070-3872911017-3508780997-1340
>  SID[  7]: S-1-5-21-2867130070-3872911017-3508780997-7131
>  SID[  8]: S-1-5-21-2867130070-3872911017-3508780997-3411
>  SID[  9]: S-1-5-21-2867130070-3872911017-3508780997-4007
>  SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008
>  SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786
>  SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374
>  SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365
>  SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344
>  SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061
>  SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372
>  SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307
>  SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513
>  SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906
>  SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908
>  SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916
>  SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921
>  SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923
>  SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692
>  SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315
>  SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682
>  SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933
>  SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480
>  SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244
>  SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773
>  SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096
>  SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081
>  SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001
>  SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029
>  SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121
>  SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127
>  SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161
>  SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241
>  SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261
>  SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321
>  SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325
>  SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335
>  SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341
>  SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 1518
>  Primary group is 40 and contains 13 supplementary groups
>  Group[  0]: 40
>  Group[  1]: 0
>  Group[  2]: 14
>  Group[  3]: 60
>  Group[  4]: 63
>  Group[  5]: 80
>  Group[  6]: 120
>  Group[  7]: 130
>  Group[  8]: 160
>  Group[  9]: 162
>  Group[ 10]: 167
>  Group[ 11]: 170
>  Group[ 12]: 1025
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309)
>  change_to_user uid=(1518,1518) gid=(0,40)
>[2006/06/23 12:38:22, 1] smbd/service.c:make_connection_snum(693)
>  kreaper-xp (172.17.134.118) connect to service dfs initially as user rajeev (uid=1518, gid=40) (pid 23658)
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 2] smbd/reply.c:reply_tcon_and_X(703)
>  Serving dfs as a Dfs root
>[2006/06/23 12:38:22, 3] smbd/reply.c:reply_tcon_and_X(708)
>  tconX service=DFS 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=54
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=3840
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    3 (0x3)
>  smb_bcc=13
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 41 3A 00 4E 00 54 00 46  00 53 00 00 00           A:.N.T.F .S...
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 120
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x78
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 8 of length 124
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=120
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=3904
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 8704 (0x2200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  256 (0x100)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=  256 (0x100)
>  smb_vwv[20]=   64 (0x40)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=37
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 31 00 37 00 32  00 2E 00 31 00 37 00 2E  .\.1.7.2 ...1.7..
>  [010] 00 34 00 39 00 2E 00 31  00 32 00 5C 00 64 00 66  .4.9...1 .2.\.d.f
>  [020] 00 73 00 00 00                                    .s... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBntcreateX (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114
>  contains 45 SIDs
>  SID[  0]: S-1-5-21-2867130070-3872911017-3508780997-3114
>  SID[  1]: S-1-5-21-2867130070-3872911017-3508780997-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2867130070-3872911017-3508780997-4746
>  SID[  6]: S-1-5-21-2867130070-3872911017-3508780997-1340
>  SID[  7]: S-1-5-21-2867130070-3872911017-3508780997-7131
>  SID[  8]: S-1-5-21-2867130070-3872911017-3508780997-3411
>  SID[  9]: S-1-5-21-2867130070-3872911017-3508780997-4007
>  SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008
>  SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786
>  SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374
>  SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365
>  SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344
>  SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061
>  SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372
>  SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307
>  SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513
>  SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906
>  SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908
>  SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916
>  SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921
>  SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923
>  SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692
>  SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315
>  SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682
>  SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933
>  SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480
>  SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244
>  SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773
>  SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096
>  SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081
>  SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001
>  SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029
>  SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121
>  SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127
>  SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161
>  SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241
>  SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261
>  SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321
>  SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325
>  SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335
>  SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341
>  SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 1518
>  Primary group is 40 and contains 13 supplementary groups
>  Group[  0]: 40
>  Group[  1]: 0
>  Group[  2]: 14
>  Group[  3]: 60
>  Group[  4]: 63
>  Group[  5]: 80
>  Group[  6]: 120
>  Group[  7]: 130
>  Group[  8]: 160
>  Group[  9]: 162
>  Group[ 10]: 167
>  Group[ 11]: 170
>  Group[ 12]: 1025
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309)
>  change_to_user uid=(1518,1518) gid=(0,40)
>[2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /export/dfsroot
>[2006/06/23 12:38:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506)
>  reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91)
>  temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101)
>  parse_processed_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431)
>  dfs_redirect: Not redirecting 172.17.49.12/dfs.
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435)
>  dfs_redirect: Path converted to non-dfs path 
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/23 12:38:22, 5] smbd/open.c:open_directory(1808)
>  open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1
>[2006/06/23 12:38:22, 5] smbd/files.c:file_new(128)
>  allocated file structure 1860, fnum = 5956 (1 used)
>[2006/06/23 12:38:22, 10] locking/locking.c:unparse_share_modes(540)
>  unparse_share_modes: del: 0, num: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:print_share_mode_table(417)
>  print_share_mode_table: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910)
>  reply_ntcreate_and_X: fnum = 5956, open name = .
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=3904
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=17408 (0x4400)
>  smb_vwv[ 3]=  279 (0x117)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=32768 (0x8000)
>  smb_vwv[ 6]=46040 (0xB3D8)
>  smb_vwv[ 7]= 2238 (0x8BE)
>  smb_vwv[ 8]=50838 (0xC696)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=62062 (0xF26E)
>  smb_vwv[11]=58194 (0xE352)
>  smb_vwv[12]=50838 (0xC696)
>  smb_vwv[13]=32769 (0x8001)
>  smb_vwv[14]=46040 (0xB3D8)
>  smb_vwv[15]= 2238 (0x8BE)
>  smb_vwv[16]=50838 (0xC696)
>  smb_vwv[17]=32769 (0x8001)
>  smb_vwv[18]=46040 (0xB3D8)
>  smb_vwv[19]= 2238 (0x8BE)
>  smb_vwv[20]=50838 (0xC696)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 72
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x48
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 9 of length 76
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=3968
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 44 17 EE 03                              ...D... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913)
>  call_trans2qfilepathinfo . (fnum = 5956) level=1006 call=7 total_data=0
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=3968
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 00 00 02 00 0A  00 00 FD 00 00           ........ .....
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 70
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x46
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 10 of length 74
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4032
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 05 01                                    ..... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfsinfo(2136)
>  call_trans2qfsinfo: level = 261
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4032
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   20 (0x14)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   20 (0x14)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=21
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 2B 00 00 00 FF 00 00  00 08 00 00 00 4E 00 54  .+...... .....N.T
>  [010] 00 46 00 53 00                                    .F.S. 
>[2006/06/23 12:38:22, 4] smbd/trans2.c:call_trans2qfsinfo(2465)
>  SMBtrans2 info_level = 261
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 41
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x29
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 11 of length 45
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4096
>  smt_wct=3
>  smb_vwv[ 0]= 5956 (0x1744)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBclose (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/reply.c:reply_close(3257)
>  close directory fnum=5956
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 5] smbd/files.c:file_free(450)
>  freed files structure 5956 (0 used)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4096
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 120
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x78
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 12 of length 124
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=120
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4160
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 8704 (0x2200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8256 (0x2040)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=37
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 31 00 37 00 32  00 2E 00 31 00 37 00 2E  .\.1.7.2 ...1.7..
>  [010] 00 34 00 39 00 2E 00 31  00 32 00 5C 00 64 00 66  .4.9...1 .2.\.d.f
>  [020] 00 73 00 00 00                                    .s... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBntcreateX (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506)
>  reply_ntcreateX: flags = 0x10, access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91)
>  temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101)
>  parse_processed_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431)
>  dfs_redirect: Not redirecting 172.17.49.12/dfs.
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435)
>  dfs_redirect: Path converted to non-dfs path 
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/23 12:38:22, 3] smbd/dosmode.c:unix_mode(121)
>  unix_mode(.) returning 0744
>[2006/06/23 12:38:22, 10] smbd/open.c:open_file_ntcreate(1091)
>  open_file_ntcreate: fname=., dos_attrs=0x0 access_mask=0x80 share_access=0x7 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 10] smbd/open.c:open_file_ntcreate(1259)
>  open_file_ntcreate: fname=., after mapping access_mask=0x80
>[2006/06/23 12:38:22, 5] smbd/files.c:file_new(128)
>  allocated file structure 1861, fnum = 5957 (1 used)
>[2006/06/23 12:38:22, 4] smbd/open.c:open_file_ntcreate(1490)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/23 12:38:22, 5] smbd/files.c:file_free(450)
>  freed files structure 5957 (0 used)
>[2006/06/23 12:38:22, 5] smbd/open.c:open_directory(1808)
>  open_directory: opening directory ., access_mask = 0x80, share_access = 0x7 create_options = 0x204000, create_disposition = 0x1
>[2006/06/23 12:38:22, 5] smbd/files.c:file_new(128)
>  allocated file structure 1862, fnum = 5958 (1 used)
>[2006/06/23 12:38:22, 10] locking/locking.c:unparse_share_modes(540)
>  unparse_share_modes: del: 0, num: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:print_share_mode_table(417)
>  print_share_mode_table: share_mode_entry[0]:  pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910)
>  reply_ntcreate_and_X: fnum = 5958, open name = .
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4160
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=17920 (0x4600)
>  smb_vwv[ 3]=  279 (0x117)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=32768 (0x8000)
>  smb_vwv[ 6]=46040 (0xB3D8)
>  smb_vwv[ 7]= 2238 (0x8BE)
>  smb_vwv[ 8]=50838 (0xC696)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=62062 (0xF26E)
>  smb_vwv[11]=58194 (0xE352)
>  smb_vwv[12]=50838 (0xC696)
>  smb_vwv[13]=32769 (0x8001)
>  smb_vwv[14]=46040 (0xB3D8)
>  smb_vwv[15]= 2238 (0x8BE)
>  smb_vwv[16]=50838 (0xC696)
>  smb_vwv[17]=32769 (0x8001)
>  smb_vwv[18]=46040 (0xB3D8)
>  smb_vwv[19]= 2238 (0x8BE)
>  smb_vwv[20]=50838 (0xC696)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 72
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x48
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 13 of length 76
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4224
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 46 17 EE 03                              ...F... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913)
>  call_trans2qfilepathinfo . (fnum = 5958) level=1006 call=7 total_data=0
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4224
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 00 00 02 00 0A  00 00 FD 00 00           ........ .....
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 72
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x48
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 14 of length 76
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4288
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 46 17 EC 03                              ...F... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913)
>  call_trans2qfilepathinfo . (fnum = 5958) level=1004 call=7 total_data=0
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3108)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2006/06/23 12:38:22, 5] smbd/trans2.c:call_trans2qfilepathinfo(3118)
>  SMB_QFBI - create: Thu Jun 22 10:32:53 2006
>   access: Fri Jun 23 12:37:32 2006
>   write: Thu Jun 22 10:32:53 2006
>   change: Thu Jun 22 10:32:53 2006
>   mode: 10
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4288
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 00 00 80 D8 B3  BE 08 96 C6 01 00 6E F2  ........ ......n.
>  [010] 52 E3 96 C6 01 80 D8 B3  BE 08 96 C6 01 80 D8 B3  R....... ........
>  [020] BE 08 96 C6 01 10 00 00  00 00 00 00 00           ........ .....
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 41
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x29
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 15 of length 45
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4352
>  smt_wct=3
>  smb_vwv[ 0]= 5958 (0x1746)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBclose (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/reply.c:reply_close(3257)
>  close directory fnum=5958
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x7, private_options = 0x204000, access_mask = 0x80, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 5] smbd/files.c:file_free(450)
>  freed files structure 5958 (0 used)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4352
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 120
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x78
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 16 of length 124
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=120
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4416
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 8704 (0x2200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  256 (0x100)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=  256 (0x100)
>  smb_vwv[20]=   64 (0x40)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=37
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 31 00 37 00 32  00 2E 00 31 00 37 00 2E  .\.1.7.2 ...1.7..
>  [010] 00 34 00 39 00 2E 00 31  00 32 00 5C 00 64 00 66  .4.9...1 .2.\.d.f
>  [020] 00 73 00 00 00                                    .s... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBntcreateX (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506)
>  reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91)
>  temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101)
>  parse_processed_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431)
>  dfs_redirect: Not redirecting 172.17.49.12/dfs.
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435)
>  dfs_redirect: Path converted to non-dfs path 
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/23 12:38:22, 5] smbd/open.c:open_directory(1808)
>  open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1
>[2006/06/23 12:38:22, 5] smbd/files.c:file_new(128)
>  allocated file structure 1863, fnum = 5959 (1 used)
>[2006/06/23 12:38:22, 10] locking/locking.c:unparse_share_modes(540)
>  unparse_share_modes: del: 0, num: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:print_share_mode_table(417)
>  print_share_mode_table: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910)
>  reply_ntcreate_and_X: fnum = 5959, open name = .
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4416
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=18176 (0x4700)
>  smb_vwv[ 3]=  279 (0x117)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=32768 (0x8000)
>  smb_vwv[ 6]=46040 (0xB3D8)
>  smb_vwv[ 7]= 2238 (0x8BE)
>  smb_vwv[ 8]=50838 (0xC696)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=62062 (0xF26E)
>  smb_vwv[11]=58194 (0xE352)
>  smb_vwv[12]=50838 (0xC696)
>  smb_vwv[13]=32769 (0x8001)
>  smb_vwv[14]=46040 (0xB3D8)
>  smb_vwv[15]= 2238 (0x8BE)
>  smb_vwv[16]=50838 (0xC696)
>  smb_vwv[17]=32769 (0x8001)
>  smb_vwv[18]=46040 (0xB3D8)
>  smb_vwv[19]= 2238 (0x8BE)
>  smb_vwv[20]=50838 (0xC696)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 72
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x48
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 17 of length 76
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4480
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 47 17 EE 03                              ...G... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913)
>  call_trans2qfilepathinfo . (fnum = 5959) level=1006 call=7 total_data=0
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4480
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 00 00 02 00 0A  00 00 FD 00 00           ........ .....
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 136
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x88
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 18 of length 140
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=136
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4544
>  smt_wct=15
>  smb_vwv[ 0]=   68 (0x44)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   68 (0x44)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=71
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 16 00 56 05 16  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 31 00 37 00 32 00 2E  00 31 00 37 00 2E 00 34  .1.7.2.. .1.7...4
>  [020] 00 39 00 2E 00 31 00 32  00 5C 00 64 00 66 00 73  .9...1.2 .\.d.f.s
>  [030] 00 5C 00 53 00 43 00 52  00 41 00 54 00 43 00 48  .\.S.C.R .A.T.C.H
>  [040] 00 22 00 2A 00 00 00                              .".*... 
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/trans2.c:call_trans2findfirst(1632)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(91)
>  temp in parse_processed_dfs_path: .172.17.49.12/dfs/SCRATCH"*. after trimming \'s
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(101)
>  parse_processed_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(113)
>  parse_processed_dfs_path: servicename: dfs
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_processed_dfs_path(123)
>  parse_processed_dfs_path: rest of the path: SCRATCH"*
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:resolve_dfs_path(336)
>  resolve_dfs_path: Conn path = /export/dfsroot req_path = SCRATCH"*
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "SCRATCH"*"
>[2006/06/23 12:38:22, 10] smbd/statcache.c:stat_cache_lookup(215)
>  stat_cache_lookup: lookup failed for name [SCRATCH"*]
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(185)
>  unix_convert begin: name = SCRATCH"*, dirpath = , start = SCRATCH"*
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled SCRATCH"* ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component SCRATCH"* (len 9) ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled SCRATCH"* ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component SCRATCH"* (len 9) ?
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(335)
>  New file SCRATCH"*
>[2006/06/23 12:38:22, 5] smbd/msdfs.c:is_msdfs_link(268)
>  is_msdfs_link: SCRATCH"* does not exist.
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(431)
>  dfs_redirect: Not redirecting 172.17.49.12/dfs/SCRATCH"*.
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:dfs_redirect(435)
>  dfs_redirect: Path converted to non-dfs path SCRATCH"*
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "SCRATCH"*"
>[2006/06/23 12:38:22, 10] smbd/statcache.c:stat_cache_lookup(215)
>  stat_cache_lookup: lookup failed for name [SCRATCH"*]
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(185)
>  unix_convert begin: name = SCRATCH"*, dirpath = , start = SCRATCH"*
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled SCRATCH"* ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component SCRATCH"* (len 9) ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled SCRATCH"* ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component SCRATCH"* (len 9) ?
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(335)
>  New file SCRATCH"*
>[2006/06/23 12:38:22, 5] smbd/trans2.c:call_trans2findfirst(1688)
>  dir=./, mask = SCRATCH"*
>[2006/06/23 12:38:22, 5] smbd/dir.c:dptr_create(391)
>  dptr_create dir=./
>[2006/06/23 12:38:22, 3] smbd/dir.c:dptr_create(511)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2006/06/23 12:38:22, 4] smbd/trans2.c:call_trans2findfirst(1745)
>  dptr_num is 256, wcard = SCRATCH"*, attr = 22
>[2006/06/23 12:38:22, 8] smbd/trans2.c:call_trans2findfirst(1750)
>  dirpath=<./> dontdescend=<>
>[2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079)
>  get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 0
>[2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079)
>  get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 2147483648
>[2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079)
>  get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 771496934
>[2006/06/23 12:38:22, 5] smbd/msdfs.c:is_msdfs_link(281)
>  is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch
>[2006/06/23 12:38:22, 5] smbd/trans2.c:get_lanman2_dir_entry(1131)
>  get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: ./scratch
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:22, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d[sparse]
>[2006/06/23 12:38:22, 5] smbd/trans2.c:get_lanman2_dir_entry(1169)
>  get_lanman2_dir_entry found ./scratch fname=scratch
>[2006/06/23 12:38:22, 10] smbd/trans2.c:get_lanman2_dir_entry(1310)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079)
>  get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 1671277131
>[2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079)
>  get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset 2147483647
>[2006/06/23 12:38:22, 8] smbd/trans2.c:get_lanman2_dir_entry(1079)
>  get_lanman2_dir_entry:readdir on dirptr 0x552af14bf0 now at offset -1
>[2006/06/23 12:38:22, 5] smbd/trans2.c:call_trans2findfirst(1798)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2006/06/23 12:38:22, 4] smbd/dir.c:dptr_close_internal(238)
>  closing dptr key 256
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=176
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4544
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  108 (0x6C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  108 (0x6C)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=121
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 FD FF 01 00 01 00 00  00 00 00 00 00 6C 00 00  ........ .....l..
>  [010] 00 00 00 00 00 80 7F 4F  BC 04 96 C6 01 00 D3 BF  .......O ........
>  [020] 70 E3 96 C6 01 80 7F 4F  BC 04 96 C6 01 80 7F 4F  p......O .......O
>  [030] BC 04 96 C6 01 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [040] 00 00 00 00 00 10 02 00  00 0E 00 00 00 00 00 00  ........ ........
>  [050] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [060] 00 00 00 00 00 00 00 00  00 00 00 73 00 63 00 72  ........ ...s.c.r
>  [070] 00 61 00 74 00 63 00 68  00                       .a.t.c.h .
>[2006/06/23 12:38:22, 4] smbd/trans2.c:call_trans2findfirst(1834)
>  SMBtrans2 mask=SCRATCH"* directory=./ dirtype=22 numentries=1
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:name_map(617)
>  name_map: SCRATCH"* -> 09E18AF1 -> S2QP5O~1 (cache=1)
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 41
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x29
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 19 of length 45
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4608
>  smt_wct=3
>  smb_vwv[ 0]= 5959 (0x1747)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBclose (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:22, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:22, 3] smbd/reply.c:reply_close(3257)
>  close directory fnum=5959
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:22, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:22, 5] smbd/files.c:file_free(450)
>  freed files structure 5959 (0 used)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4608
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 90
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x5a
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 20 of length 94
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=90
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4672
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   90 (0x5A)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=47
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 5C 00 31 00 37  00 32 00 2E 00 31 00 37  .\.\.1.7 .2...1.7
>  [010] 00 2E 00 34 00 39 00 2E  00 31 00 32 00 5C 00 49  ...4.9.. .1.2.\.I
>  [020] 00 50 00 43 00 24 00 00  00 3F 3F 3F 3F 3F 00     .P.C.$.. .?????.
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtconX (pid 23658) conn 0x0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 4] smbd/reply.c:reply_tcon_and_X(660)
>  Client requested device type [?????] for share [IPC$]
>[2006/06/23 12:38:22, 5] smbd/service.c:make_connection(860)
>  making a connection to 'normal' service ipc$
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_alloc(290)
>  Finding user rajeev
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(234)
>  Trying _Get_Pwnam(), username as lowercase is rajeev
>[2006/06/23 12:38:22, 10] lib/util_pw.c:getpwnam_alloc(98)
>  Got rajeev from pwnam_cache
>[2006/06/23 12:38:22, 5] lib/username.c:Get_Pwnam_internals(267)
>  Get_Pwnam_internals did find user [rajeev]!
>[2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(488)
>  Connect path is '/tmp' for service [IPC$]
>[2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240)
>  get_share_security: using default secdesc for IPC$
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233)
>  se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114.
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250)
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-513
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308)
>  se_access_check: access (2) granted.
>[2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216)
>  Initialising default vfs hooks
>[2006/06/23 12:38:22, 5] smbd/connection.c:claim_connection(170)
>  claiming IPC$ 0
>[2006/06/23 12:38:22, 10] smbd/uid.c:is_share_read_only_for_user(127)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user rajeev
>[2006/06/23 12:38:22, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240)
>  get_share_security: using default secdesc for IPC$
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2006/06/23 12:38:22, 10] lib/util_seaccess.c:se_access_check(233)
>  se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114.
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(250)
>[2006/06/23 12:38:22, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372
>  se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-513
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244
>  se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773
>  se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341
>  se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2006/06/23 12:38:22, 5] lib/util_seaccess.c:se_access_check(308)
>  se_access_check: access (1) granted.
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114
>  contains 45 SIDs
>  SID[  0]: S-1-5-21-2867130070-3872911017-3508780997-3114
>  SID[  1]: S-1-5-21-2867130070-3872911017-3508780997-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2867130070-3872911017-3508780997-4746
>  SID[  6]: S-1-5-21-2867130070-3872911017-3508780997-1340
>  SID[  7]: S-1-5-21-2867130070-3872911017-3508780997-7131
>  SID[  8]: S-1-5-21-2867130070-3872911017-3508780997-3411
>  SID[  9]: S-1-5-21-2867130070-3872911017-3508780997-4007
>  SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008
>  SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786
>  SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374
>  SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365
>  SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344
>  SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061
>  SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372
>  SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307
>  SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513
>  SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906
>  SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908
>  SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916
>  SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921
>  SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923
>  SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692
>  SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315
>  SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682
>  SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933
>  SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480
>  SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244
>  SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773
>  SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096
>  SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081
>  SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001
>  SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029
>  SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121
>  SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127
>  SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161
>  SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241
>  SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261
>  SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321
>  SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325
>  SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335
>  SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341
>  SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 1518
>  Primary group is 40 and contains 13 supplementary groups
>  Group[  0]: 40
>  Group[  1]: 0
>  Group[  2]: 14
>  Group[  3]: 60
>  Group[  4]: 63
>  Group[  5]: 80
>  Group[  6]: 120
>  Group[  7]: 130
>  Group[  8]: 160
>  Group[  9]: 162
>  Group[ 10]: 167
>  Group[ 11]: 170
>  Group[ 12]: 1025
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309)
>  change_to_user uid=(1518,1518) gid=(0,40)
>[2006/06/23 12:38:22, 3] smbd/service.c:make_connection_snum(693)
>  kreaper-xp (172.17.134.118) connect to service IPC$ initially as user rajeev (uid=1518, gid=40) (pid 23658)
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:22, 3] smbd/reply.c:reply_tcon_and_X(708)
>  tconX service=IPC$ 
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=4672
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 124
>[2006/06/23 12:38:22, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x7c
>[2006/06/23 12:38:22, 3] smbd/process.c:process_smb(1194)
>  Transaction 21 of length 128
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=124
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4736
>  smt_wct=15
>  smb_vwv[ 0]=   56 (0x38)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   56 (0x38)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=   16 (0x10)
>  smb_bcc=59
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 03 00 5C 00 31  00 37 00 32 00 2E 00 31  .....\.1 .7.2...1
>  [010] 00 37 00 2E 00 34 00 39  00 2E 00 31 00 32 00 5C  .7...4.9 ...1.2.\
>  [020] 00 64 00 66 00 73 00 5C  00 73 00 63 00 72 00 61  .d.f.s.\ .s.c.r.a
>  [030] 00 74 00 63 00 68 00 5C  00 00 00                 .t.c.h.\ ...
>[2006/06/23 12:38:22, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af71bc0
>[2006/06/23 12:38:22, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114
>  contains 45 SIDs
>  SID[  0]: S-1-5-21-2867130070-3872911017-3508780997-3114
>  SID[  1]: S-1-5-21-2867130070-3872911017-3508780997-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2867130070-3872911017-3508780997-4746
>  SID[  6]: S-1-5-21-2867130070-3872911017-3508780997-1340
>  SID[  7]: S-1-5-21-2867130070-3872911017-3508780997-7131
>  SID[  8]: S-1-5-21-2867130070-3872911017-3508780997-3411
>  SID[  9]: S-1-5-21-2867130070-3872911017-3508780997-4007
>  SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008
>  SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786
>  SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374
>  SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365
>  SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344
>  SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061
>  SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372
>  SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307
>  SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513
>  SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906
>  SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908
>  SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916
>  SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921
>  SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923
>  SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692
>  SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315
>  SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682
>  SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933
>  SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480
>  SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244
>  SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773
>  SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096
>  SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081
>  SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001
>  SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029
>  SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121
>  SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127
>  SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161
>  SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241
>  SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261
>  SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321
>  SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325
>  SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335
>  SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341
>  SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:22, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 1518
>  Primary group is 40 and contains 13 supplementary groups
>  Group[  0]: 40
>  Group[  1]: 0
>  Group[  2]: 14
>  Group[  3]: 60
>  Group[  4]: 63
>  Group[  5]: 80
>  Group[  6]: 120
>  Group[  7]: 130
>  Group[  8]: 160
>  Group[  9]: 162
>  Group[ 10]: 167
>  Group[ 11]: 170
>  Group[ 12]: 1025
>[2006/06/23 12:38:22, 5] smbd/uid.c:change_to_user(309)
>  change_to_user uid=(1518,1518) gid=(0,40)
>[2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /tmp
>[2006/06/23 12:38:22, 10] smbd/trans2.c:call_trans2getdfsreferral(4668)
>  call_trans2getdfsreferral
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(44)
>  temp in parse_dfs_path: .172.17.49.12\dfs\scratch. after trimming \'s
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(54)
>  parse_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(66)
>  parse_dfs_path: servicename: dfs
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_dfs_path(71)
>  parse_dfs_path: rest of the path: scratch
>[2006/06/23 12:38:22, 3] smbd/vfs.c:vfs_init_default(216)
>  Initialising default vfs hooks
>[2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /export/dfsroot
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:resolve_dfs_path(336)
>  resolve_dfs_path: Conn path = /export/dfsroot req_path = scratch
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file "scratch"
>[2006/06/23 12:38:22, 10] smbd/statcache.c:stat_cache_lookup(215)
>  stat_cache_lookup: lookup failed for name [SCRATCH]
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(185)
>  unix_convert begin: name = scratch, dirpath = , start = scratch
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled scratch ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component scratch (len 7) ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled(276)
>  is_mangled scratch ?
>[2006/06/23 12:38:22, 10] smbd/mangle_hash2.c:is_mangled_component(215)
>  is_mangled_component scratch (len 7) ?
>[2006/06/23 12:38:22, 5] smbd/statcache.c:stat_cache_add(140)
>  stat_cache_add: Added entry (552af6a9f0:size8) SCRATCH -> scratch
>[2006/06/23 12:38:22, 5] smbd/statcache.c:stat_cache_add(140)
>  stat_cache_add: Added entry (552af6a9f0:size8) SCRATCH -> scratch
>[2006/06/23 12:38:22, 5] smbd/filename.c:unix_convert(400)
>  conversion finished scratch -> scratch
>[2006/06/23 12:38:22, 5] smbd/msdfs.c:is_msdfs_link(281)
>  is_msdfs_link: scratch -> msdfs:netvenus.tigr.org\scratch
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_symlink(210)
>  parse_symlink: count=1
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:parse_symlink(236)
>  parse_symlink: Created alt path: \netvenus.tigr.org\scratch
>[2006/06/23 12:38:22, 6] smbd/msdfs.c:resolve_dfs_path(350)
>  resolve_dfs_path: \172.17.49.12\dfs\scratch\ resolves to a valid Dfs link.
>[2006/06/23 12:38:22, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /tmp
>[2006/06/23 12:38:22, 3] smbd/msdfs.c:setup_dfs_referral(825)
>  setup_dfs_referral: Path \172.17.49.12\dfs\scratch\ to alternate path(s): \netvenus.tigr.org\scratch.
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(835)
>  max_referral_level :3
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(711)
>  setting up version3 referral
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(715)
>[2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058)
>  [000] 5C 00 31 00 37 00 32 00  2E 00 31 00 37 00 2E 00  \.1.7.2. ..1.7...
>  [010] 34 00 39 00 2E 00 31 00  32 00 5C 00 64 00 66 00  4.9...1. 2.\.d.f.
>  [020] 73 00 5C 00 73 00 63 00  72 00 61 00 74 00 63 00  s.\.s.c. r.a.t.c.
>  [030] 68 00 5C 00 00 00                                 h.\... 
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_ver3_dfs_referral(724)
>  referral 0 : \netvenus.tigr.org\scratch
>[2006/06/23 12:38:22, 10] smbd/msdfs.c:setup_dfs_referral(855)
>  DFS Referral pdata:
>[2006/06/23 12:38:22, 0] lib/util.c:dump_data(2058)
>  [000] 34 00 01 00 02 00 00 00  03 00 22 00 00 00 00 00  4....... ..".....
>  [010] 58 02 00 00 22 00 58 00  8E 00 00 00 00 00 00 00  X...".X. ........
>  [020] 00 00 00 00 00 00 00 00  00 00 5C 00 31 00 37 00  ........ ..\.1.7.
>  [030] 32 00 2E 00 31 00 37 00  2E 00 34 00 39 00 2E 00  2...1.7. ..4.9...
>  [040] 31 00 32 00 5C 00 64 00  66 00 73 00 5C 00 73 00  1.2.\.d. f.s.\.s.
>  [050] 63 00 72 00 61 00 74 00  63 00 68 00 5C 00 00 00  c.r.a.t. c.h.\...
>  [060] 5C 00 31 00 37 00 32 00  2E 00 31 00 37 00 2E 00  \.1.7.2. ..1.7...
>  [070] 34 00 39 00 2E 00 31 00  32 00 5C 00 64 00 66 00  4.9...1. 2.\.d.f.
>  [080] 73 00 5C 00 73 00 63 00  72 00 61 00 74 00 63 00  s.\.s.c. r.a.t.c.
>  [090] 68 00 5C 00 00 00 5C 00  6E 00 65 00 74 00 76 00  h.\...\. n.e.t.v.
>  [0A0] 65 00 6E 00 75 00 73 00  2E 00 74 00 69 00 67 00  e.n.u.s. ..t.i.g.
>  [0B0] 72 00 2E 00 6F 00 72 00  67 00 5C 00 73 00 63 00  r...o.r. g.\.s.c.
>  [0C0] 72 00 61 00 74 00 63 00  68 00 00 00              r.a.t.c. h...
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 204, useable_space = 131012
>[2006/06/23 12:38:22, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 0, data_to_send = 204, paramsize = 0, datasize = 204
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:22, 5] lib/util.c:show_msg(464)
>  size=260
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=55361
>  smb_tid=3
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4736
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  204 (0xCC)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  204 (0xCC)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=205
>[2006/06/23 12:38:22, 10] lib/util.c:dump_data(2058)
>  [000] 00 34 00 01 00 02 00 00  00 03 00 22 00 00 00 00  .4...... ..."....
>  [010] 00 58 02 00 00 22 00 58  00 8E 00 00 00 00 00 00  .X...".X ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 5C 00 31 00 37  ........ ...\.1.7
>  [030] 00 32 00 2E 00 31 00 37  00 2E 00 34 00 39 00 2E  .2...1.7 ...4.9..
>  [040] 00 31 00 32 00 5C 00 64  00 66 00 73 00 5C 00 73  .1.2.\.d .f.s.\.s
>  [050] 00 63 00 72 00 61 00 74  00 63 00 68 00 5C 00 00  .c.r.a.t .c.h.\..
>  [060] 00 5C 00 31 00 37 00 32  00 2E 00 31 00 37 00 2E  .\.1.7.2 ...1.7..
>  [070] 00 34 00 39 00 2E 00 31  00 32 00 5C 00 64 00 66  .4.9...1 .2.\.d.f
>  [080] 00 73 00 5C 00 73 00 63  00 72 00 61 00 74 00 63  .s.\.s.c .r.a.t.c
>  [090] 00 68 00 5C 00 00 00 5C  00 6E 00 65 00 74 00 76  .h.\...\ .n.e.t.v
>  [0A0] 00 65 00 6E 00 75 00 73  00 2E 00 74 00 69 00 67  .e.n.u.s ...t.i.g
>  [0B0] 00 72 00 2E 00 6F 00 72  00 67 00 5C 00 73 00 63  .r...o.r .g.\.s.c
>  [0C0] 00 72 00 61 00 74 00 63  00 68 00 00 00           .r.a.t.c .h...
>[2006/06/23 12:38:22, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:22, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 110
>[2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x6e
>[2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194)
>  Transaction 22 of length 114
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=110
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4800
>  smt_wct=15
>  smb_vwv[ 0]=   42 (0x2A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   42 (0x2A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=45
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 31 00 37 00 32  ........ .\.1.7.2
>  [010] 00 2E 00 31 00 37 00 2E  00 34 00 39 00 2E 00 31  ...1.7.. .4.9...1
>  [020] 00 32 00 5C 00 64 00 66  00 73 00 00 00           .2.\.d.f .s...
>[2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:23, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:23, 5] auth/auth_util.c:debug_nt_user_token(438)
>  NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114
>  contains 45 SIDs
>  SID[  0]: S-1-5-21-2867130070-3872911017-3508780997-3114
>  SID[  1]: S-1-5-21-2867130070-3872911017-3508780997-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2867130070-3872911017-3508780997-4746
>  SID[  6]: S-1-5-21-2867130070-3872911017-3508780997-1340
>  SID[  7]: S-1-5-21-2867130070-3872911017-3508780997-7131
>  SID[  8]: S-1-5-21-2867130070-3872911017-3508780997-3411
>  SID[  9]: S-1-5-21-2867130070-3872911017-3508780997-4007
>  SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008
>  SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786
>  SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374
>  SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365
>  SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344
>  SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061
>  SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372
>  SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307
>  SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513
>  SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906
>  SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908
>  SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916
>  SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921
>  SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923
>  SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692
>  SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315
>  SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682
>  SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933
>  SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480
>  SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244
>  SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773
>  SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096
>  SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081
>  SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001
>  SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029
>  SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121
>  SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127
>  SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161
>  SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241
>  SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261
>  SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321
>  SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325
>  SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335
>  SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341
>  SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2006/06/23 12:38:23, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 1518
>  Primary group is 40 and contains 13 supplementary groups
>  Group[  0]: 40
>  Group[  1]: 0
>  Group[  2]: 14
>  Group[  3]: 60
>  Group[  4]: 63
>  Group[  5]: 80
>  Group[  6]: 120
>  Group[  7]: 130
>  Group[  8]: 160
>  Group[  9]: 162
>  Group[ 10]: 167
>  Group[ 11]: 170
>  Group[ 12]: 1025
>[2006/06/23 12:38:23, 5] smbd/uid.c:change_to_user(309)
>  change_to_user uid=(1518,1518) gid=(0,40)
>[2006/06/23 12:38:23, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /export/dfsroot
>[2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2861)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(91)
>  temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s
>[2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(101)
>  parse_processed_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(431)
>  dfs_redirect: Not redirecting 172.17.49.12/dfs.
>[2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(435)
>  dfs_redirect: Path converted to non-dfs path 
>[2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:23, 10] smbd/trans2.c:call_trans2qfilepathinfo(3108)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2006/06/23 12:38:23, 5] smbd/trans2.c:call_trans2qfilepathinfo(3118)
>  SMB_QFBI - create: Thu Jun 22 10:32:53 2006
>   access: Fri Jun 23 12:38:22 2006
>   write: Thu Jun 22 10:32:53 2006
>   change: Thu Jun 22 10:32:53 2006
>   mode: 10
>[2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4800
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 00 00 80 D8 B3  BE 08 96 C6 01 00 D3 BF  ........ ........
>  [010] 70 E3 96 C6 01 80 D8 B3  BE 08 96 C6 01 80 D8 B3  p....... ........
>  [020] BE 08 96 C6 01 10 00 00  00 00 00 00 00           ........ .....
>[2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:23, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 110
>[2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x6e
>[2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194)
>  Transaction 23 of length 114
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=110
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4864
>  smt_wct=15
>  smb_vwv[ 0]=   42 (0x2A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   42 (0x2A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=45
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 31 00 37 00 32  ........ .\.1.7.2
>  [010] 00 2E 00 31 00 37 00 2E  00 34 00 39 00 2E 00 31  ...1.7.. .4.9...1
>  [020] 00 32 00 5C 00 64 00 66  00 73 00 00 00           .2.\.d.f .s...
>[2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2861)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(91)
>  temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s
>[2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(101)
>  parse_processed_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(431)
>  dfs_redirect: Not redirecting 172.17.49.12/dfs.
>[2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(435)
>  dfs_redirect: Path converted to non-dfs path 
>[2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:23, 10] smbd/trans2.c:call_trans2qfilepathinfo(3108)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2006/06/23 12:38:23, 5] smbd/trans2.c:call_trans2qfilepathinfo(3118)
>  SMB_QFBI - create: Thu Jun 22 10:32:53 2006
>   access: Fri Jun 23 12:38:22 2006
>   write: Thu Jun 22 10:32:53 2006
>   change: Thu Jun 22 10:32:53 2006
>   mode: 10
>[2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4864
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 00 00 80 D8 B3  BE 08 96 C6 01 00 D3 BF  ........ ........
>  [010] 70 E3 96 C6 01 80 D8 B3  BE 08 96 C6 01 80 D8 B3  p....... ........
>  [020] BE 08 96 C6 01 10 00 00  00 00 00 00 00           ........ .....
>[2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:23, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 120
>[2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x78
>[2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194)
>  Transaction 24 of length 124
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=120
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4928
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 8704 (0x2200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8256 (0x2040)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=37
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 5C 00 31 00 37 00 32  00 2E 00 31 00 37 00 2E  .\.1.7.2 ...1.7..
>  [010] 00 34 00 39 00 2E 00 31  00 32 00 5C 00 64 00 66  .4.9...1 .2.\.d.f
>  [020] 00 73 00 00 00                                    .s... 
>[2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993)
>  switch message SMBntcreateX (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:23, 10] smbd/nttrans.c:reply_ntcreate_and_X(506)
>  reply_ntcreateX: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0
>[2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(91)
>  temp in parse_processed_dfs_path: .172.17.49.12/dfs. after trimming \'s
>[2006/06/23 12:38:23, 10] smbd/msdfs.c:parse_processed_dfs_path(101)
>  parse_processed_dfs_path: hostname: 172.17.49.12
>[2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(431)
>  dfs_redirect: Not redirecting 172.17.49.12/dfs.
>[2006/06/23 12:38:23, 3] smbd/msdfs.c:dfs_redirect(435)
>  dfs_redirect: Path converted to non-dfs path 
>[2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(108)
>  unix_convert called on file ""
>[2006/06/23 12:38:23, 5] smbd/filename.c:unix_convert(137)
>  conversion finished "" -> .
>[2006/06/23 12:38:23, 3] smbd/dosmode.c:unix_mode(121)
>  unix_mode(.) returning 0744
>[2006/06/23 12:38:23, 10] smbd/open.c:open_file_ntcreate(1091)
>  open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x3 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:23, 10] smbd/open.c:open_file_ntcreate(1259)
>  open_file_ntcreate: fname=., after mapping access_mask=0x100080
>[2006/06/23 12:38:23, 5] smbd/files.c:file_new(128)
>  allocated file structure 1864, fnum = 5960 (1 used)
>[2006/06/23 12:38:23, 4] smbd/open.c:open_file_ntcreate(1490)
>  calling open_file with flags=0x0 flags2=0x0 mode=0744
>[2006/06/23 12:38:23, 5] smbd/files.c:file_free(450)
>  freed files structure 5960 (0 used)
>[2006/06/23 12:38:23, 5] smbd/open.c:open_directory(1808)
>  open_directory: opening directory ., access_mask = 0x100080, share_access = 0x3 create_options = 0x204000, create_disposition = 0x1
>[2006/06/23 12:38:23, 5] smbd/files.c:file_new(128)
>  allocated file structure 1865, fnum = 5961 (1 used)
>[2006/06/23 12:38:23, 10] locking/locking.c:unparse_share_modes(540)
>  unparse_share_modes: del: 0, num: 1
>[2006/06/23 12:38:23, 10] locking/locking.c:print_share_mode_table(417)
>  print_share_mode_table: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x204000, access_mask = 0x100080, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:23, 5] smbd/nttrans.c:reply_ntcreate_and_X(910)
>  reply_ntcreate_and_X: fnum = 5961, open name = .
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4928
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=18688 (0x4900)
>  smb_vwv[ 3]=  279 (0x117)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=32768 (0x8000)
>  smb_vwv[ 6]=46040 (0xB3D8)
>  smb_vwv[ 7]= 2238 (0x8BE)
>  smb_vwv[ 8]=50838 (0xC696)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=49107 (0xBFD3)
>  smb_vwv[11]=58224 (0xE370)
>  smb_vwv[12]=50838 (0xC696)
>  smb_vwv[13]=32769 (0x8001)
>  smb_vwv[14]=46040 (0xB3D8)
>  smb_vwv[15]= 2238 (0x8BE)
>  smb_vwv[16]=50838 (0xC696)
>  smb_vwv[17]=32769 (0x8001)
>  smb_vwv[18]=46040 (0xB3D8)
>  smb_vwv[19]= 2238 (0x8BE)
>  smb_vwv[20]=50838 (0xC696)
>  smb_vwv[21]= 4097 (0x1001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=  256 (0x100)
>  smb_bcc=0
>[2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:23, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 72
>[2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x48
>[2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194)
>  Transaction 25 of length 76
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4992
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 49 17 EE 03                              ...I... 
>[2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993)
>  switch message SMBtrans2 (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x204000, access_mask = 0x100080, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:23, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913)
>  call_trans2qfilepathinfo . (fnum = 5961) level=1006 call=7 total_data=0
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(300)
>  dos_mode: .
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode_from_sbuf(167)
>  dos_mode_from_sbuf returning d
>[2006/06/23 12:38:23, 8] smbd/dosmode.c:dos_mode(334)
>  dos_mode returning d
>[2006/06/23 12:38:23, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(685)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2006/06/23 12:38:23, 9] smbd/trans2.c:send_trans2_replies(687)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=4992
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00 00 00 02 00 0A  00 00 FD 00 00           ........ .....
>[2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:23, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 84
>[2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x54
>[2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194)
>  Transaction 26 of length 88
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=5056
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=   64 (0x40)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=  168 (0xA8)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]= 5961 (0x1749)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] 00 00 00                                          ... 
>[2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993)
>  switch message SMBnttrans (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:23, 10] smbd/nttrans.c:reply_nttrans(2806)
>  reply_nttrans: setup_count = 8
>[2006/06/23 12:38:23, 10] lib/util.c:dump_data(2058)
>  [000] A8 00 09 00 49 17 01 00                           ....I... 
>[2006/06/23 12:38:23, 10] smbd/nttrans.c:call_nt_transact_ioctl(2131)
>  call_nt_transact_ioctl: function[0x000900A8] FID[0x1749] isFSctl[0x01] compfilter[0x00]
>[2006/06/23 12:38:23, 10] smbd/nttrans.c:call_nt_transact_ioctl(2162)
>  FSCTL_GET_REPARSE_POINT: called on FID[0x1749](but not implemented)
>[2006/06/23 12:38:23, 3] smbd/error.c:error_packet(146)
>  error packet at smbd/nttrans.c(95) cmd=160 (SMBnttrans) NT_STATUS_NOT_A_REPARSE_POINT
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0xa0
>  smb_rcls=117
>  smb_reh=2
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=2
>  smb_pid=748
>  smb_uid=103
>  smb_mid=5056
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:23, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 41
>[2006/06/23 12:38:23, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x29
>[2006/06/23 12:38:23, 3] smbd/process.c:process_smb(1194)
>  Transaction 27 of length 45
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5120
>  smt_wct=3
>  smb_vwv[ 0]= 5961 (0x1749)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2006/06/23 12:38:23, 3] smbd/process.c:switch_message(993)
>  switch message SMBclose (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:23, 4] smbd/uid.c:change_to_user(222)
>  change_to_user: Skipping user change - already user
>[2006/06/23 12:38:23, 3] smbd/reply.c:reply_close(3257)
>  close directory fnum=5961
>[2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(442)
>  parse_share_modes: delete_on_close: 0, num_share_modes: 1
>[2006/06/23 12:38:23, 10] locking/locking.c:parse_share_modes(488)
>  parse_share_modes: share_mode_entry[0]:  pid = 23658, share_access = 0x3, private_options = 0x204000, access_mask = 0x100080, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362
>[2006/06/23 12:38:23, 5] smbd/files.c:file_free(450)
>  freed files structure 5961 (0 used)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:23, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5120
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:23, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:23, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 39
>[2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x27
>[2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194)
>  Transaction 28 of length 43
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5184
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993)
>  switch message SMBulogoffX (pid 23658) conn 0x0
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:free_server_info(1511)
>  attempting to free (and zero) a server_info structure
>[2006/06/23 12:38:26, 3] smbd/reply.c:reply_ulogoffX(1606)
>  ulogoffX vuid=101
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5184
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:26, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x23
>[2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194)
>  Transaction 29 of length 39
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5248
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993)
>  switch message SMBtdis (pid 23658) conn 0x552af6f3a0
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /tmp
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 3] smbd/service.c:close_cnum(885)
>  kreaper-xp (172.17.134.118) closed connection to service IPC$
>[2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5248
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:26, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x23
>[2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194)
>  Transaction 30 of length 39
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5312
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993)
>  switch message SMBtdis (pid 23658) conn 0x552af71bc0
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /tmp
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 3] smbd/service.c:close_cnum(885)
>  kreaper-xp (172.17.134.118) closed connection to service IPC$
>[2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5312
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:26, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 39
>[2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x27
>[2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194)
>  Transaction 31 of length 43
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5376
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993)
>  switch message SMBulogoffX (pid 23658) conn 0x0
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:free_server_info(1511)
>  attempting to free (and zero) a server_info structure
>[2006/06/23 12:38:26, 3] smbd/reply.c:reply_ulogoffX(1606)
>  ulogoffX vuid=103
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5376
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:26, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:26, 10] lib/util_sock.c:read_smb_length_return_keepalive(618)
>  got smb length of 35
>[2006/06/23 12:38:26, 6] smbd/process.c:process_smb(1193)
>  got message type 0x0 of len 0x23
>[2006/06/23 12:38:26, 3] smbd/process.c:process_smb(1194)
>  Transaction 32 of length 39
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5440
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:26, 3] smbd/process.c:switch_message(993)
>  switch message SMBtdis (pid 23658) conn 0x552af70db0
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /export/dfsroot
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 1] smbd/service.c:close_cnum(885)
>  kreaper-xp (172.17.134.118) closed connection to service dfs
>[2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to dfs
>[2006/06/23 12:38:26, 4] smbd/vfs.c:vfs_ChDir(738)
>  vfs_ChDir to /
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(454)
>[2006/06/23 12:38:26, 5] lib/util.c:show_msg(464)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=103
>  smb_mid=5440
>  smt_wct=0
>  smb_bcc=0
>[2006/06/23 12:38:26, 10] smbd/process.c:setup_select_timeout(1372)
>  change_notify_timeout: -1
>[2006/06/23 12:38:26, 10] smbd/process.c:run_events(299)
>  run_events: No events
>[2006/06/23 12:38:26, 10] lib/util_sock.c:read_data(520)
>  read_data: read of 4 returned 0. Error = Success
>[2006/06/23 12:38:26, 10] lib/util_sock.c:receive_smb_raw(669)
>  receive_smb_raw: length < 0!
>[2006/06/23 12:38:26, 3] smbd/process.c:timeout_processing(1447)
>  timeout_processing: End of file from client (client has disconnected).
>[2006/06/23 12:38:26, 5] lib/gencache.c:gencache_shutdown(89)
>  Closing cache file
>[2006/06/23 12:38:26, 5] libsmb/namecache.c:namecache_shutdown(79)
>  namecache_shutdown: netbios namecache closed successfully.
>[2006/06/23 12:38:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_nt_user_token(433)
>  NT user token: (NULL)
>[2006/06/23 12:38:26, 5] auth/auth_util.c:debug_unix_user_token(454)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2006/06/23 12:38:26, 5] smbd/uid.c:change_to_root_user(324)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2006/06/23 12:38:26, 2] smbd/server.c:exit_server(614)
>  Closing connections
>[2006/06/23 12:38:26, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to 
>[2006/06/23 12:38:26, 3] smbd/server.c:exit_server(655)
>  Server exit (normal exit)
>[2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173)
>  find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found.
>[2006/06/23 12:38:26, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382)
>  announce_myself_to_domain_master_browser: t (1151080696) - last(1151080612) < 900
>[2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284)
>  dump_workgroups()
>   dump workgroup on subnet    172.17.49.12: netmask=  255.255.255.0:
>  	TIGR(1) current master browser = UNKNOWN
>  		IBRIX2 40809b03 (ibrix2)
>[2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284)
>  dump_workgroups()
>   dump workgroup on subnet  UNICAST_SUBNET: netmask=        0.0.0.0:
>  	TIGR(1) current master browser = UNKNOWN
>  		IBRIX2 40809b03 (ibrix2)
>[2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173)
>  find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.
>[2006/06/23 12:38:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173)
>  find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.

Actions: View

Attachments on bug 3853: 1979 | 1980 | 1981 | 2022 | 2023