The Samba-Bugzilla – Attachment 2023 Details for
Bug 3853
msdfs broken (similar to bug 1406)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
failed attempt to access a dfs link
smb.log.failure (text/plain), 364.49 KB, created by
rajeev
on 2006-07-07 12:05:57 UTC
(
hide
)
Description:
failed attempt to access a dfs link
Filename:
MIME Type:
Creator:
rajeev
Created:
2006-07-07 12:05:57 UTC
Size:
364.49 KB
patch
obsolete
>[2006/07/07 13:00:19, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/07/07 13:00:19, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1152291609) - last(1152291575) < 900 >[2006/07/07 13:00:19, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(282) > dump_workgroups() > dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2.tigr.org) >[2006/07/07 13:00:19, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(282) > dump_workgroups() > dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2.tigr.org) >[2006/07/07 13:00:19, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/07/07 13:00:19, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/07/07 13:00:29, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1152291619) - last(1152291575) < 900 >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(282) > dump_workgroups() > dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2.tigr.org) >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(282) > dump_workgroups() > dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2.tigr.org) >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/07/07 13:00:29, 10] lib/util_sock.c:read_udp_socket(294) > read_udp_socket: lastip 172.18.7.214 lastport 50982 read: 50 >[2006/07/07 13:00:29, 10] libsmb/nmblib.c:parse_nmb(506) > parse_nmb: packet id = 1 >[2006/07/07 13:00:29, 5] libsmb/nmblib.c:read_packet(755) > Received a packet of len 50 from (172.18.7.214) port 50982 >[2006/07/07 13:00:29, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.18.7.214(50982) header: id=1 opcode=Query(0) response=No > header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=No > header: rcode=0 qdcount=1 ancount=0 nscount=0 arcount=0 > question: q_name=*<00> q_type=33 q_class=1 >[2006/07/07 13:00:29, 10] nmbd/nmbd_winsserver.c:packet_is_for_wins_server(466) > packet_is_for_wins_server: failing WINS test #1. >[2006/07/07 13:00:29, 3] nmbd/nmbd_incomingrequests.c:process_node_status_request(323) > process_node_status_request: status request for name *<00> from IP 172.18.7.214 on subnet UNICAST_SUBNET. >[2006/07/07 13:00:29, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(127) > find_name_on_subnet: on subnet UNICAST_SUBNET - found name *<00> source=5 >[2006/07/07 13:00:29, 4] nmbd/nmbd_packets.c:reply_netbios_packet(940) > reply_netbios_packet: sending a reply of packet type: nmb_status *<00> to ip 172.18.7.214 for id 1 >[2006/07/07 13:00:29, 4] libsmb/nmblib.c:debug_nmb_packet(112) > nmb packet from 172.18.7.214(50982) header: id=1 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=*<00> rr_type=33 rr_class=1 ttl=0 > answers 0 char .IBRIX2 hex 05494252495832202020202020202020 > answers 10 char .d.IBRIX2 hex 00640049425249583220202020202020 > answers 20 char .d.IBRIX2 hex 20200364004942524958322020202020 > answers 30 char d.TIGR hex 20202020206400544947522020202020 > answers 40 char ...TIGR hex 2020202020201EE40054494752202020 > answers 50 char ........ hex 202020202020202000E4000000000000 > answers 60 char ................ hex 00000000000000000000000000000000 > answers 70 char ................ hex 00000000000000000000000000000000 > answers 80 char ......... hex 000000000000000000 >[2006/07/07 13:00:29, 5] libsmb/nmblib.c:send_udp(777) > Sending a packet of len 193 to (172.18.7.214) on port 50982 >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/07/07 13:00:29, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1152291629) - last(1152291575) < 900 >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(282) > dump_workgroups() > dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2.tigr.org) >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(282) > dump_workgroups() > dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: > TIGR(1) current master browser = UNKNOWN > IBRIX2 40809b03 (ibrix2.tigr.org) >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/07/07 13:00:29, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 3] smbd/oplock.c:init_oplocks(862) > open_oplock_ipc: initializing messages. >[2006/07/07 13:00:29, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(260) > Linux kernel oplocks enabled >[2006/07/07 13:00:29, 4] lib/time.c:TimeInit(136) > TimeInit: Serverzone is 14400 >[2006/07/07 13:00:29, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:29, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 68 >[2006/07/07 13:00:29, 6] smbd/process.c:process_smb(1109) > got message type 0x81 of len 0x44 >[2006/07/07 13:00:29, 3] smbd/process.c:process_smb(1110) > Transaction 0 of length 72 >[2006/07/07 13:00:29, 2] smbd/reply.c:reply_special(496) > netbios connect: name1=IBRIX2 name2=RAJEEV-OSX >[2006/07/07 13:00:29, 2] smbd/reply.c:reply_special(503) > netbios connect: local=ibrix2 remote=rajeev-osx, name type = 0 >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 5] smbd/reply.c:reply_special(543) > init msg_type=0x81 msg_flags=0x0 >[2006/07/07 13:00:29, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:29, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 168 >[2006/07/07 13:00:29, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0xa8 >[2006/07/07 13:00:29, 3] smbd/process.c:process_smb(1110) > Transaction 1 of length 172 >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(488) > size=168 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=18433 > smb_tid=65535 > smb_pid=1 > smb_uid=65535 > smb_mid=0 > smt_wct=0 > smb_bcc=133 >[2006/07/07 13:00:29, 10] lib/util.c:dump_data(2215) > [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG > [010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO > [020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 > [030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW > [040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN > [050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. > [060] 4C 41 4E 4D 41 4E 32 2E 31 00 02 4E 54 20 4C 41 LANMAN2. 1..NT LA > [070] 4E 4D 41 4E 20 31 2E 30 00 02 4E 54 20 4C 4D 20 NMAN 1.0 ..NT LM > [080] 30 2E 31 32 00 0.12. >[2006/07/07 13:00:29, 3] smbd/process.c:switch_message(914) > switch message SMBnegprot (pid 8052) conn 0x0 >[2006/07/07 13:00:29, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:29, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:29, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:29, 5] smbd/uid.c:change_to_root_user(275) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [PC NETWORK PROGRAM 1.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [MICROSOFT NETWORKS 1.03] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [MICROSOFT NETWORKS 3.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [LANMAN1.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [LM1.2X002] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [LANMAN2.1] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [NT LANMAN 1.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [NT LM 0.12] >[2006/07/07 13:00:29, 10] lib/util.c:set_remote_arch(2190) > set_remote_arch: Client arch is 'WinNT' >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 5] smbd/connection.c:claim_connection(170) > claiming 0 >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 10] lib/util.c:name_to_fqdn(2832) > name_to_fqdn: lookup for IBRIX2 -> IBRIX2.tigr.org. >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_nt1(357) > using SPNEGO >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(580) > Selected protocol NT LANMAN 1.0 >[2006/07/07 13:00:29, 5] smbd/negprot.c:reply_negprot(586) > negprot index=6 >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(488) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=18433 > smb_tid=65535 > smb_pid=1 > smb_uid=65535 > smb_mid=0 > smt_wct=17 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=29696 (0x7400) > smb_vwv[ 8]= 31 (0x1F) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=33011 (0x80F3) > smb_vwv[11]=32896 (0x8080) > smb_vwv[12]=31860 (0x7C74) > smb_vwv[13]=59097 (0xE6D9) > smb_vwv[14]=50849 (0xC6A1) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]=26880 (0x6900) > smb_bcc=105 >[2006/07/07 13:00:29, 10] lib/util.c:dump_data(2215) > [000] 69 62 72 69 78 32 00 00 00 00 00 00 00 00 00 00 ibrix2.. ........ > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 24 `W..+... ...M0K.$ > [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......* > [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... > [040] 37 02 02 0A A3 23 30 21 A0 1F 1B 1D 63 69 66 73 7....#0! ....cifs > [050] 2F 69 62 72 69 78 32 2E 74 69 67 72 2E 6F 72 67 /ibrix2. tigr.org > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/07/07 13:00:29, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:29, 10] lib/util_sock.c:read_data(525) > read_data: read of 4 returned 0. Error = Success >[2006/07/07 13:00:29, 10] lib/util_sock.c:receive_smb_raw(672) > receive_smb_raw: length < 0! >[2006/07/07 13:00:29, 3] smbd/process.c:timeout_processing(1359) > timeout_processing: End of file from client (client has disconnected). >[2006/07/07 13:00:29, 5] lib/gencache.c:gencache_shutdown(90) > Closing cache file >[2006/07/07 13:00:29, 5] libsmb/namecache.c:namecache_shutdown(79) > namecache_shutdown: netbios namecache closed successfully. >[2006/07/07 13:00:29, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:29, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:29, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:29, 5] smbd/uid.c:change_to_root_user(275) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/07/07 13:00:29, 3] smbd/connection.c:yield_connection(69) > Yielding connection to >[2006/07/07 13:00:29, 3] smbd/server.c:exit_server_common(675) > Server exit (normal exit) >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/07/07 13:00:29, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 3] smbd/oplock.c:init_oplocks(862) > open_oplock_ipc: initializing messages. >[2006/07/07 13:00:29, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(260) > Linux kernel oplocks enabled >[2006/07/07 13:00:29, 4] lib/time.c:TimeInit(136) > TimeInit: Serverzone is 14400 >[2006/07/07 13:00:29, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:29, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 68 >[2006/07/07 13:00:29, 6] smbd/process.c:process_smb(1109) > got message type 0x81 of len 0x44 >[2006/07/07 13:00:29, 3] smbd/process.c:process_smb(1110) > Transaction 0 of length 72 >[2006/07/07 13:00:29, 2] smbd/reply.c:reply_special(496) > netbios connect: name1=IBRIX2 name2=RAJEEV-OSX >[2006/07/07 13:00:29, 2] smbd/reply.c:reply_special(503) > netbios connect: local=ibrix2 remote=rajeev-osx, name type = 0 >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 5] smbd/reply.c:reply_special(543) > init msg_type=0x81 msg_flags=0x0 >[2006/07/07 13:00:29, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:29, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 168 >[2006/07/07 13:00:29, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0xa8 >[2006/07/07 13:00:29, 3] smbd/process.c:process_smb(1110) > Transaction 1 of length 172 >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(488) > size=168 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=16385 > smb_tid=65535 > smb_pid=1 > smb_uid=65535 > smb_mid=0 > smt_wct=0 > smb_bcc=133 >[2006/07/07 13:00:29, 10] lib/util.c:dump_data(2215) > [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG > [010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO > [020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 > [030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW > [040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN > [050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. > [060] 4C 41 4E 4D 41 4E 32 2E 31 00 02 4E 54 20 4C 41 LANMAN2. 1..NT LA > [070] 4E 4D 41 4E 20 31 2E 30 00 02 4E 54 20 4C 4D 20 NMAN 1.0 ..NT LM > [080] 30 2E 31 32 00 0.12. >[2006/07/07 13:00:29, 3] smbd/process.c:switch_message(914) > switch message SMBnegprot (pid 8053) conn 0x0 >[2006/07/07 13:00:29, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:29, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:29, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:29, 5] smbd/uid.c:change_to_root_user(275) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [PC NETWORK PROGRAM 1.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [MICROSOFT NETWORKS 1.03] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [MICROSOFT NETWORKS 3.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [LANMAN1.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [LM1.2X002] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [LANMAN2.1] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [NT LANMAN 1.0] >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(487) > Requested protocol [NT LM 0.12] >[2006/07/07 13:00:29, 10] lib/util.c:set_remote_arch(2190) > set_remote_arch: Client arch is 'WinNT' >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 5] smbd/connection.c:claim_connection(170) > claiming 0 >[2006/07/07 13:00:29, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:29, 10] smbd/negprot.c:get_challenge(42) > get challenge: creating negprot_global_auth_context >[2006/07/07 13:00:29, 5] auth/auth.c:make_auth_context_subsystem(505) > Making default auth method list for security=ADS >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend sam >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'sam' >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend sam_ignoredomain >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'sam_ignoredomain' >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend unix >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'unix' >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend winbind >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'winbind' >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend smbserver >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'smbserver' >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend trustdomain >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'trustdomain' >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend ntdomain >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'ntdomain' >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(47) > Attempting to register auth backend guest >[2006/07/07 13:00:29, 5] auth/auth.c:smb_register_auth(59) > Successfully added auth method 'guest' >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(391) > load_auth_module: Attempting to find an auth method to match guest >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(416) > load_auth_module: auth method guest has a valid init >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(391) > load_auth_module: Attempting to find an auth method to match sam >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(416) > load_auth_module: auth method sam has a valid init >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(391) > load_auth_module: Attempting to find an auth method to match winbind:ntdomain >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(391) > load_auth_module: Attempting to find an auth method to match ntdomain >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(416) > load_auth_module: auth method ntdomain has a valid init >[2006/07/07 13:00:29, 5] auth/auth.c:load_auth_module(416) > load_auth_module: auth method winbind has a valid init >[2006/07/07 13:00:29, 10] smbd/negprot.c:get_challenge(47) > get challenge: getting challenge >[2006/07/07 13:00:29, 5] auth/auth.c:get_ntlm_challenge(97) > auth_get_challenge: module guest did not want to specify a challenge >[2006/07/07 13:00:29, 5] auth/auth.c:get_ntlm_challenge(97) > auth_get_challenge: module sam did not want to specify a challenge >[2006/07/07 13:00:29, 5] auth/auth.c:get_ntlm_challenge(97) > auth_get_challenge: module winbind did not want to specify a challenge >[2006/07/07 13:00:29, 5] auth/auth.c:get_ntlm_challenge(137) > auth_context challenge created by random >[2006/07/07 13:00:29, 5] auth/auth.c:get_ntlm_challenge(138) > challenge is: >[2006/07/07 13:00:29, 5] lib/util.c:dump_data(2215) > [000] 3B 86 0C F8 C5 C5 EB 80 ;....... >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_nt1(350) > not using SPNEGO >[2006/07/07 13:00:29, 3] smbd/negprot.c:reply_negprot(580) > Selected protocol NT LANMAN 1.0 >[2006/07/07 13:00:29, 5] smbd/negprot.c:reply_negprot(586) > negprot index=6 >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:29, 5] lib/util.c:show_msg(488) > size=87 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=16385 > smb_tid=65535 > smb_pid=1 > smb_uid=65535 > smb_mid=0 > smt_wct=17 > smb_vwv[ 0]= 6 (0x6) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=29952 (0x7500) > smb_vwv[ 8]= 31 (0x1F) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=33011 (0x80F3) > smb_vwv[11]=32768 (0x8000) > smb_vwv[12]=31860 (0x7C74) > smb_vwv[13]=59097 (0xE6D9) > smb_vwv[14]=50849 (0xC6A1) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 2048 (0x800) > smb_bcc=18 >[2006/07/07 13:00:29, 10] lib/util.c:dump_data(2215) > [000] 3B 86 0C F8 C5 C5 EB 80 54 00 49 00 47 00 52 00 ;....... T.I.G.R. > [010] 00 00 .. >[2006/07/07 13:00:29, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 214 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0xd6 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 2 of length 218 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=214 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=65535 > smb_pid=1 > smb_uid=65535 > smb_mid=1 > smt_wct=13 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 6 (0x6) > smb_vwv[ 5]= 8053 (0x1F75) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 24 (0x18) > smb_vwv[ 8]= 76 (0x4C) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 92 (0x5C) > smb_vwv[12]= 0 (0x0) > smb_bcc=153 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] E3 9D 52 6A 16 B4 79 E6 D2 5A D3 D3 EB 57 24 72 ..Rj..y. .Z...W$r > [010] 0A 20 06 9B 6A DE 51 19 B2 E3 27 C9 87 5C BC 40 . ..j.Q. ..'..\.@ > [020] 70 53 8E 5E CB 7E 47 E9 01 01 00 00 00 00 00 00 pS.^.~G. ........ > [030] 00 0B 15 DA E6 A1 C6 01 0A 20 06 9B 6A DE 51 19 ........ . ..j.Q. > [040] 00 00 00 00 02 00 08 00 54 00 49 00 47 00 52 00 ........ T.I.G.R. > [050] 01 00 0C 00 49 00 42 00 52 00 49 00 58 00 32 00 ....I.B. R.I.X.2. > [060] 00 00 00 00 00 52 00 41 00 4A 00 45 00 45 00 56 .....R.A .J.E.E.V > [070] 00 00 00 54 00 49 00 47 00 52 00 00 00 4D 00 61 ...T.I.G .R...M.a > [080] 00 63 00 4F 00 53 00 58 00 00 00 4E 00 45 00 54 .c.O.S.X ...N.E.T > [090] 00 53 00 4D 00 42 00 00 00 .S.M.B.. . >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBsesssetupX (pid 8053) conn 0x0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 5] smbd/uid.c:change_to_root_user(275) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/07/07 13:00:33, 3] smbd/sesssetup.c:reply_sesssetup_and_X(845) > wct=13 flg2=0xc001 >[2006/07/07 13:00:33, 3] smbd/sesssetup.c:reply_sesssetup_and_X(991) > Domain=[TIGR] NativeOS=[MacOSX] NativeLanMan=[NETSMB] PrimaryDomain=[] >[2006/07/07 13:00:33, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1006) > sesssetupX:name=[TIGR]\[RAJEEV]@[rajeev-osx] >[2006/07/07 13:00:33, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:33, 4] smbd/map_username.c:map_username(111) > Scanning username map /etc/samba/username.map >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(465) > user_in_list: checking user RAJEEV in list >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(470) > user_in_list: checking user |RAJEEV| against |TIGR\rajeev| >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(465) > user_in_list: checking user RAJEEV in list >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(470) > user_in_list: checking user |RAJEEV| against |TIGR\tigradm| >[2006/07/07 13:00:33, 5] auth/auth_util.c:make_user_info_map(162) > make_user_info_map: Mapping user [TIGR]\[RAJEEV] from workstation [rajeev-osx] >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_get(312) > Cache entry with key = TDOMCACHE/TIMESTAMP couldn't be found >[2006/07/07 13:00:33, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch_timestamp(220) > no timestamp for trusted domain cache located. >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_set(131) > Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Fri Jul 7 13:10:33 2006 > (600 seconds ahead) >[2006/07/07 13:00:33, 4] libsmb/namequery_dc.c:ads_dc_name(43) > ads_dc_name: domain=TIGR >[2006/07/07 13:00:33, 6] libads/ldap.c:ads_find_dc(220) > ads_find_dc: looking for realm 'TIGR.ORG' >[2006/07/07 13:00:33, 8] libsmb/namequery.c:get_sorted_dc_list(1526) > get_sorted_dc_list: attempting lookup using [ads] >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_get(312) > Cache entry with key = SAF/DOMAIN/TIGR.ORG couldn't be found >[2006/07/07 13:00:33, 5] libsmb/namequery.c:saf_fetch(105) > saf_fetch: failed to find server for "TIGR.ORG" domain >[2006/07/07 13:00:33, 3] libsmb/namequery.c:get_dc_list(1401) > get_dc_list: preferred server list: ", dc.tigr.org" >[2006/07/07 13:00:33, 10] libsmb/namequery.c:internal_resolve_name(1112) > internal_resolve_name: looking up dc.tigr.org#20 >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_get(287) > Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jul 7 13:08:12 2006 >[2006/07/07 13:00:33, 5] libsmb/namecache.c:namecache_fetch(201) > name dc.tigr.org#20 found. >[2006/07/07 13:00:33, 10] libsmb/namequery.c:remove_duplicate_addrs2(408) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2006/07/07 13:00:33, 4] libsmb/namequery.c:get_dc_list(1504) > get_dc_list: returning 1 ip addresses in an ordered list >[2006/07/07 13:00:33, 4] libsmb/namequery.c:get_dc_list(1505) > get_dc_list: 172.17.5.33:389 >[2006/07/07 13:00:33, 5] libads/ldap.c:ads_try_connect(125) > ads_try_connect: sending CLDAP request to 172.17.5.33 >[2006/07/07 13:00:33, 10] libsmb/namequery.c:saf_store(71) > saf_store: domain = [TIGR], server = [172.17.5.33], expire = [1152292533] >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_set(131) > Adding cache entry with key = SAF/DOMAIN/TIGR; value = 172.17.5.33 and timeout = Fri Jul 7 13:15:33 2006 > (900 seconds ahead) >[2006/07/07 13:00:33, 3] libads/ldap.c:ads_connect(283) > Connected to LDAP server 172.17.5.33 >[2006/07/07 13:00:33, 4] libsmb/namequery_dc.c:ads_dc_name(63) > ads_dc_name: using server='TIGRDC2.TIGR.ORG' IP=172.17.5.33 >[2006/07/07 13:00:33, 3] libsmb/cliconnect.c:cli_start_connection(1417) > Connecting to host=TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 3] lib/util_sock.c:open_socket_out(874) > Connecting to 172.17.5.33 at port 445 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,183) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,183) wrote 183 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 174 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]= 8320 (0x2080) > smb_vwv[12]=24204 (0x5E8C) > smb_vwv[13]=59104 (0xE6E0) > smb_vwv[14]=50849 (0xC6A1) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 5D 23 61 9C B4 3E D2 40 A5 9A F9 DA A6 CB D8 A5 ]#a..>.@ ........ > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]= 8320 (0x2080) > smb_vwv[12]=24204 (0x5E8C) > smb_vwv[13]=59104 (0xE6E0) > smb_vwv[14]=50849 (0xC6A1) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 5D 23 61 9C B4 3E D2 40 A5 9A F9 DA A6 CB D8 A5 ]#a..>.@ ........ > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,92) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,92) wrote 92 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 179 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=34819 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=34819 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,100) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,100) wrote 100 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 48 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/07/07 13:00:33, 10] libsmb/clientgen.c:cli_init_creds(233) > cli_init_creds: user domain >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,104) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,104) wrote 104 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 103 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 2816 (0xB00) > smb_vwv[ 3]= 320 (0x140) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[400b]: \lsarpc auth_type 0, auth_level 0 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. > [010] 00 00 00 00 .... >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0b >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0048 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0010 max_tsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0012 max_rsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 assoc_gid: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0018 num_contexts: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 001c context_id : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 001e num_transfer_syntaxes: 01 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0020 data : 12345778 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0024 data : 1234 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0026 data : abcd >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0028 data : ef 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 002a data : 01 23 45 67 89 ab >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 version: 00000000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0034 data : 8a885d04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0038 data : 1ceb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 003a data : 11c9 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003c data : 9f e8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003e data : 08 00 2b 10 48 60 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0044 version: 00000002 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \lsarpc fnum 0x400b >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16395 (0x400B) > smb_bcc=87 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,158) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,158) wrote 158 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 E3 2C 01 00 0C 00 5C 50 49 50 45 ......,. ...\PIPE > [020] 5C 6C 73 61 73 73 00 80 30 01 00 00 00 00 00 00 \lsass.. 0....... > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... > [010] 00 B8 10 B8 10 E3 2C 01 00 0C 00 5C 50 49 50 45 ......,. ...\PIPE > [020] 5C 6C 73 61 73 73 00 80 30 01 00 00 00 00 00 00 \lsass.. 0....... > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0044 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000001 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \lsarpc fnum 0x400b returned 68 bytes. >[2006/07/07 13:00:33, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine TIGRDC2.TIGR.ORG pipe \lsarpc fnum 0x400b bind request returned ok. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0044 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0010 max_tsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0012 max_rsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 assoc_gid: 00012ce3 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0018 len: 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 001a str: \PIPE\lsass. >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0028 num_results: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 002c result : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 002e reason : 0000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 data : 8a885d04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0034 data : 1ceb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0036 data : 11c9 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0038 data : 9f e8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003a data : 08 00 2b 10 48 60 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0040 version: 00000002 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2271) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine TIGRDC2.TIGR.ORG and bound anonymously. >[2006/07/07 13:00:33, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(185) > init_lsa_sec_qos >[2006/07/07 13:00:33, 5] rpc_parse/parse_lsa.c:init_q_open_pol(304) > init_open_pol: attr:0 da:1 >[2006/07/07 13:00:33, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(236) > init_lsa_obj_attr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_open_pol >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 ptr : 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0004 system_name: 005c >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 lsa_io_obj_attr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 len : 00000018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c ptr_root_dir: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 ptr_obj_name: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 attributes : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0018 ptr_sec_desc: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 001c ptr_sec_qos : 00000001 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 lsa_io_obj_qos sec_qos >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0020 len : 0000000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0024 sec_imp_level : 0002 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0026 sec_ctxt_mode : 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0027 effective_only: 00 >[2006/07/07 13:00:33, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224) > lsa_io_sec_qos: length c does not match size 8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0028 des_access: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0044 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000002 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 0000002c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0016 opnum : 0006 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \lsarpc fnum 0x400b >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=150 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 68 (0x44) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16395 (0x400B) > smb_bcc=83 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., > [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... > [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ > [050] 00 00 00 ... >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,154) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,154) wrote 154 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 7B 2D A1 ........ .....{-. > [020] E0 5E 37 B7 4E 91 D6 54 6A 10 06 5C 7D 00 00 00 .^7.N..T j..\}... > [030] 00 . >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 7B 2D A1 ........ .....{-. > [020] E0 5E 37 B7 4E 91 D6 54 6A 10 06 5C 7D 00 00 00 .^7.N..T j..\}... > [030] 00 . >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 02 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0030 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000002 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 00000018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0016 cancel_ct : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0017 reserved : 00 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \lsarpc fnum 0x400b returned 48 bytes. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_open_pol >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 data1: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 data2: e0a12d7b >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 data3: 375e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a data4: 4eb7 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 000c data5: 91 d6 54 6a 10 06 5c 7d >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_ntstatus(763) > 0014 status: NT_STATUS_OK >[2006/07/07 13:00:33, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(520) > init_q_enum_trust_dom >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_enum_trust_dom >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 data1: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 data2: e0a12d7b >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 data3: 375e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a data4: 4eb7 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 000c data5: 91 d6 54 6a 10 06 5c 7d >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 enum_context : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0018 preferred_len: 00010000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0034 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000003 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 0000001c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0016 opnum : 000d >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \lsarpc fnum 0x400b >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=134 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 52 (0x34) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 52 (0x34) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16395 (0x400B) > smb_bcc=67 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ > [020] 00 00 00 00 00 0D 00 00 00 00 00 7B 2D A1 E0 5E ........ ...{-..^ > [030] 37 B7 4E 91 D6 54 6A 10 06 5C 7D 00 00 00 00 00 7.N..Tj. .\}..... > [040] 00 01 00 ... >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,138) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,138) wrote 138 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 96 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... > [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ > [020] 00 00 00 00 00 1A 00 00 80 ........ . >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 02 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0028 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000003 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 00000010 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0016 cancel_ct : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0017 reserved : 00 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 40 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \lsarpc fnum 0x400b returned 32 bytes. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_enum_trust_dom >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 enum_context: 80000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 count: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 ptr: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_ntstatus(763) > 000c status: NT_STATUS_NO_MORE_ENTRIES >[2006/07/07 13:00:33, 10] libsmb/trusts_util.c:enumerate_domain_trusts(200) > enumerate_domain_trusts: shutting down connection... >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,45) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,45) wrote 45 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=8 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] libsmb/clientgen.c:cli_rpc_pipe_close(384) > cli_rpc_pipe_close: closed pipe \lsarpc to machine TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,39) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,39) wrote 39 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=61443 > smb_pid=8053 > smb_uid=34819 > smb_mid=9 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_get(312) > Cache entry with key = TDOM/TIGR couldn't be found >[2006/07/07 13:00:33, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) > no entry for trusted domain TIGR found. >[2006/07/07 13:00:33, 5] auth/auth_util.c:make_user_info(76) > attempting to make a user_info for RAJEEV (RAJEEV) >[2006/07/07 13:00:33, 5] auth/auth_util.c:make_user_info(86) > making strings for RAJEEV's user_info struct >[2006/07/07 13:00:33, 5] auth/auth_util.c:make_user_info(118) > making blobs for RAJEEV's user_info struct >[2006/07/07 13:00:33, 10] auth/auth_util.c:make_user_info(136) > made an encrypted user_info for RAJEEV (RAJEEV) >[2006/07/07 13:00:33, 3] auth/auth.c:check_ntlm_password(221) > check_ntlm_password: Checking password for unmapped user [TIGR]\[RAJEEV]@[rajeev-osx] with the new password interface >[2006/07/07 13:00:33, 3] auth/auth.c:check_ntlm_password(224) > check_ntlm_password: mapped user is: [TIGR]\[RAJEEV]@[rajeev-osx] >[2006/07/07 13:00:33, 10] auth/auth.c:check_ntlm_password(233) > check_ntlm_password: auth_context challenge created by random >[2006/07/07 13:00:33, 10] auth/auth.c:check_ntlm_password(235) > challenge is: >[2006/07/07 13:00:33, 5] lib/util.c:dump_data(2215) > [000] 3B 86 0C F8 C5 C5 EB 80 ;....... >[2006/07/07 13:00:33, 10] auth/auth.c:check_ntlm_password(261) > check_ntlm_password: guest had nothing to say >[2006/07/07 13:00:33, 8] lib/util.c:is_myname(2036) > is_myname("TIGR") returns 0 >[2006/07/07 13:00:33, 6] auth/auth_sam.c:check_samstrict_security(414) > check_samstrict_security: TIGR is not one of my local names (ROLE_DOMAIN_MEMBER) >[2006/07/07 13:00:33, 10] auth/auth.c:check_ntlm_password(261) > check_ntlm_password: sam had nothing to say >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:push_sec_ctx(208) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 3] smbd/uid.c:push_conn_ctx(345) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:pop_sec_ctx(339) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 4] libsmb/namequery_dc.c:ads_dc_name(43) > ads_dc_name: domain=TIGR >[2006/07/07 13:00:33, 6] libads/ldap.c:ads_find_dc(220) > ads_find_dc: looking for realm 'TIGR.ORG' >[2006/07/07 13:00:33, 8] libsmb/namequery.c:get_sorted_dc_list(1526) > get_sorted_dc_list: attempting lookup using [ads] >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_get(312) > Cache entry with key = SAF/DOMAIN/TIGR.ORG couldn't be found >[2006/07/07 13:00:33, 5] libsmb/namequery.c:saf_fetch(105) > saf_fetch: failed to find server for "TIGR.ORG" domain >[2006/07/07 13:00:33, 3] libsmb/namequery.c:get_dc_list(1401) > get_dc_list: preferred server list: ", dc.tigr.org" >[2006/07/07 13:00:33, 10] libsmb/namequery.c:internal_resolve_name(1112) > internal_resolve_name: looking up dc.tigr.org#20 >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_get(287) > Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jul 7 13:08:12 2006 >[2006/07/07 13:00:33, 5] libsmb/namecache.c:namecache_fetch(201) > name dc.tigr.org#20 found. >[2006/07/07 13:00:33, 10] libsmb/namequery.c:remove_duplicate_addrs2(408) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2006/07/07 13:00:33, 4] libsmb/namequery.c:get_dc_list(1504) > get_dc_list: returning 1 ip addresses in an ordered list >[2006/07/07 13:00:33, 4] libsmb/namequery.c:get_dc_list(1505) > get_dc_list: 172.17.5.33:389 >[2006/07/07 13:00:33, 5] libads/ldap.c:ads_try_connect(125) > ads_try_connect: sending CLDAP request to 172.17.5.33 >[2006/07/07 13:00:33, 10] libsmb/namequery.c:saf_store(71) > saf_store: domain = [TIGR], server = [172.17.5.33], expire = [1152292533] >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_set(131) > Adding cache entry with key = SAF/DOMAIN/TIGR; value = 172.17.5.33 and timeout = Fri Jul 7 13:15:33 2006 > (900 seconds ahead) >[2006/07/07 13:00:33, 3] libads/ldap.c:ads_connect(283) > Connected to LDAP server 172.17.5.33 >[2006/07/07 13:00:33, 4] libsmb/namequery_dc.c:ads_dc_name(63) > ads_dc_name: using server='TIGRDC2.TIGR.ORG' IP=172.17.5.33 >[2006/07/07 13:00:33, 10] passdb/secrets.c:secrets_named_mutex(779) > secrets_named_mutex: got mutex for TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 3] libsmb/cliconnect.c:cli_start_connection(1417) > Connecting to host=TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 3] lib/util_sock.c:open_socket_out(874) > Connecting to 172.17.5.33 at port 445 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 16384 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2006/07/07 13:00:33, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,183) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,183) wrote 183 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 174 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=27776 (0x6C80) > smb_vwv[12]=24814 (0x60EE) > smb_vwv[13]=59104 (0xE6E0) > smb_vwv[14]=50849 (0xC6A1) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 5D 23 61 9C B4 3E D2 40 A5 9A F9 DA A6 CB D8 A5 ]#a..>.@ ........ > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=174 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=27776 (0x6C80) > smb_vwv[12]=24814 (0x60EE) > smb_vwv[13]=59104 (0xE6E0) > smb_vwv[14]=50849 (0xC6A1) > smb_vwv[15]=61441 (0xF001) > smb_vwv[16]= 0 (0x0) > smb_bcc=105 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 5D 23 61 9C B4 3E D2 40 A5 9A F9 DA A6 CB D8 A5 ]#a..>.@ ........ > [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ > [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,92) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,92) wrote 92 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 179 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=12290 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=179 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=8053 > smb_uid=12290 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 179 (0xB3) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=138 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. > [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 > [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 > [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. > [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,100) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,100) wrote 100 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 48 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 49 50 43 00 00 00 00 IPC.... >[2006/07/07 13:00:33, 10] libsmb/clientgen.c:cli_init_creds(233) > cli_init_creds: user domain >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,108) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,108) wrote 108 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 103 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 448 (0x1C0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[c00e]: \NETLOGON auth_type 0, auth_level 0 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. > [010] 01 00 00 00 .... >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0b >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0048 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000004 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0010 max_tsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0012 max_rsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 assoc_gid: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0018 num_contexts: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 001c context_id : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 001e num_transfer_syntaxes: 01 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0020 data : 12345678 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0024 data : 1234 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0026 data : abcd >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0028 data : ef 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 002a data : 01 23 45 67 cf fb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 version: 00000001 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0034 data : 8a885d04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0038 data : 1ceb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 003a data : 11c9 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003c data : 9f e8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003e data : 08 00 2b 10 48 60 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0044 version: 00000002 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00e >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=49166 (0xC00E) > smb_bcc=87 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 04 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,158) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,158) wrote 158 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... > [010] 00 B8 10 B8 10 E4 2C 01 00 0C 00 5C 50 49 50 45 ......,. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... > [010] 00 B8 10 B8 10 E4 2C 01 00 0C 00 5C 50 49 50 45 ......,. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0044 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000004 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00e returned 68 bytes. >[2006/07/07 13:00:33, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00e bind request returned ok. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0044 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000004 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0010 max_tsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0012 max_rsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 assoc_gid: 00012ce4 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0018 len: 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 001a str: \PIPE\lsass. >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0028 num_results: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 002c result : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 002e reason : 0000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 data : 8a885d04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0034 data : 1ceb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0036 data : 11c9 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0038 data : 9f e8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003a data : 08 00 2b 10 48 60 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0040 version: 00000002 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2271) > cli_rpc_pipe_open_noauth: opened pipe \NETLOGON to machine TIGRDC2.TIGR.ORG and bound anonymously. >[2006/07/07 13:00:33, 4] passdb/secrets.c:secrets_fetch_trust_account_password(285) > Using cleartext machine password >[2006/07/07 13:00:33, 4] rpc_client/cli_netlogon.c:rpccli_net_req_chal(46) > cli_net_req_chal: LSA Request Challenge from IBRIX2 to \\TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 5] rpc_parse/parse_net.c:init_q_req_chal(679) > init_q_req_chal: 679 >[2006/07/07 13:00:33, 5] rpc_parse/parse_net.c:init_q_req_chal(688) > init_q_req_chal: 688 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_req_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 undoc_buffer: 00000001 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 uni_max_len: 00000013 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c uni_str_len: 00000013 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0010 buffer : \.\.T.I.G.R.D.C.2...T.I.G.R...O.R.G... >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000036 smb_io_unistr2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0038 uni_max_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 003c offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0040 uni_str_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0044 buffer : I.B.R.I.X.2... >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000052 smb_io_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0052 data: 46 d7 05 67 e3 50 80 84 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0072 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000005 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 0000005a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0016 opnum : 0004 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00e >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=196 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 114 (0x72) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 114 (0x72) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=49166 (0xC00E) > smb_bcc=129 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 72 00 00 00 05 00 00 00 5A .......r .......Z > [020] 00 00 00 00 00 04 00 01 00 00 00 13 00 00 00 00 ........ ........ > [030] 00 00 00 13 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G > [040] 00 52 00 44 00 43 00 32 00 2E 00 54 00 49 00 47 .R.D.C.2 ...T.I.G > [050] 00 52 00 2E 00 4F 00 52 00 47 00 00 00 00 00 07 .R...O.R .G...... > [060] 00 00 00 00 00 00 00 07 00 00 00 49 00 42 00 52 ........ ...I.B.R > [070] 00 49 00 58 00 32 00 00 00 46 D7 05 67 E3 50 80 .I.X.2.. .F..g.P. > [080] 84 . >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,200) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,200) wrote 200 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 92 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 72 05 00 02 03 10 00 00 00 24 00 00 00 05 00 00 r....... .$...... > [010] 00 0C 00 00 00 00 00 00 00 6B 95 7D F0 E1 58 4D ........ .k.}..XM > [020] 4A 00 00 00 00 J.... >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 72 05 00 02 03 10 00 00 00 24 00 00 00 05 00 00 r....... .$...... > [010] 00 0C 00 00 00 00 00 00 00 6B 95 7D F0 E1 58 4D ........ .k.}..XM > [020] 4A 00 00 00 00 J.... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 02 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0024 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000005 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 0000000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0016 cancel_ct : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0017 reserved : 00 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 36, data_len 12, ss_len 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 36 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00e returned 24 bytes. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_req_chal >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0000 data: 6b 95 7d f0 e1 58 4d 4a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_ntstatus(763) > 0008 status: NT_STATUS_OK >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_init(286) > creds_client_init: neg_flags : 400701ff >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_init(287) > creds_client_init: client chal : 46D70567E3508084 >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_init(288) > creds_client_init: server chal : 6B957DF0E1584D4A >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_init_64(117) > creds_init_64 >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_init_64(118) > clnt_chal_in: 46D70567E3508084 >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_init_64(119) > srv_chal_in : 6B957DF0E1584D4A >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_init_64(120) > clnt+srv : B16C8357C4A9CDCE >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_init_64(121) > sess_key_out : 63A5410D59B73639 >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_init(306) > creds_client_init: clnt : 11A555737A7F8E0B >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_init(307) > creds_client_init: server : CC5F38AFA640EB4A >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_init(308) > creds_client_init: seed : 11A555737A7F8E0B >[2006/07/07 13:00:33, 4] rpc_client/cli_netlogon.c:rpccli_net_auth2(170) > cli_net_auth2: srv:\\TIGRDC2.TIGR.ORG acct:IBRIX2$ sc:2 mc: IBRIX2 neg: 400701ff >[2006/07/07 13:00:33, 5] rpc_parse/parse_net.c:init_q_auth_2(800) > init_q_auth_2: 800 >[2006/07/07 13:00:33, 5] rpc_parse/parse_misc.c:init_log_info(1409) > make_log_info 1409 >[2006/07/07 13:00:33, 5] rpc_parse/parse_net.c:init_q_auth_2(806) > init_q_auth_2: 806 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_auth_2 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_log_info >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 undoc_buffer: 00000001 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 unistr2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 uni_max_len: 00000013 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c uni_str_len: 00000013 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0010 buffer : \.\.T.I.G.R.D.C.2...T.I.G.R...O.R.G... >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000036 smb_io_unistr2 unistr2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0038 uni_max_len: 00000008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 003c offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0040 uni_str_len: 00000008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0044 buffer : I.B.R.I.X.2.$... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0054 sec_chan: 0002 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000056 smb_io_unistr2 unistr2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0058 uni_max_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 005c offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0060 uni_str_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0064 buffer : I.B.R.I.X.2... >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000072 smb_io_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0072 data: 11 a5 55 73 7a 7f 8e 0b >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00007a net_io_neg_flags >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 007c neg_flags: 400701ff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0098 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000006 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 00000080 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0016 opnum : 000f >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00e >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=234 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 152 (0x98) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 152 (0x98) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=49166 (0xC00E) > smb_bcc=167 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 98 00 00 00 06 00 00 00 80 ........ ........ > [020] 00 00 00 00 00 0F 00 01 00 00 00 13 00 00 00 00 ........ ........ > [030] 00 00 00 13 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G > [040] 00 52 00 44 00 43 00 32 00 2E 00 54 00 49 00 47 .R.D.C.2 ...T.I.G > [050] 00 52 00 2E 00 4F 00 52 00 47 00 00 00 00 00 08 .R...O.R .G...... > [060] 00 00 00 00 00 00 00 08 00 00 00 49 00 42 00 52 ........ ...I.B.R > [070] 00 49 00 58 00 32 00 24 00 00 00 02 00 00 00 07 .I.X.2.$ ........ > [080] 00 00 00 00 00 00 00 07 00 00 00 49 00 42 00 52 ........ ...I.B.R > [090] 00 49 00 58 00 32 00 00 00 11 A5 55 73 7A 7F 8E .I.X.2.. ...Usz.. > [0A0] 0B 00 00 FF 01 07 40 ......@ >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,238) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,238) wrote 238 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 96 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 98 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 ........ .(...... > [010] 00 10 00 00 00 00 00 00 00 CC 5F 38 AF A6 40 EB ........ .._8..@. > [020] 4A FF 01 07 40 00 00 00 00 J...@... . >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 98 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 ........ .(...... > [010] 00 10 00 00 00 00 00 00 00 CC 5F 38 AF A6 40 EB ........ .._8..@. > [020] 4A FF 01 07 40 00 00 00 00 J...@... . >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 02 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0028 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000006 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 00000010 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0016 cancel_ct : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0017 reserved : 00 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 40 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00e returned 32 bytes. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_auth_2 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0000 data: cc 5f 38 af a6 40 eb 4a >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 net_io_neg_flags >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 neg_flags: 400701ff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_ntstatus(763) > 000c status: NT_STATUS_OK >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_check(325) > creds_client_check: credentials check OK. >[2006/07/07 13:00:33, 5] rpc_client/cli_netlogon.c:rpccli_netlogon_setup_creds(346) > rpccli_netlogon_setup_creds: server TIGRDC2.TIGR.ORG credential chain established. >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,108) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,108) wrote 108 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 103 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=8 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 3328 (0xD00) > smb_vwv[ 3]= 448 (0x1C0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) > Bind RPC Pipe[c00d]: \NETLOGON auth_type 2, auth_level 6 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. > [010] 01 00 00 00 .... >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_auth_schannel_neg schannel_neg >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 type1: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 type2: 00000003 >[2006/07/07 13:00:33, 6] lib/util.c:dump_data(2215) > [000] 54 49 47 52 TIGR >[2006/07/07 13:00:33, 6] lib/util.c:dump_data(2215) > [000] 49 42 52 49 58 32 IBRIX2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0b >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0064 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0014 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0010 max_tsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0012 max_rsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 assoc_gid: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0018 num_contexts: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 001c context_id : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 001e num_transfer_syntaxes: 01 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0020 data : 12345678 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0024 data : 1234 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0026 data : abcd >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0028 data : ef 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 002a data : 01 23 45 67 cf fb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 version: 00000001 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0034 data : 8a885d04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0038 data : 1ceb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 003a data : 11c9 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003c data : 9f e8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003e data : 08 00 2b 10 48 60 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0044 version: 00000002 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_rpc_hdr_auth hdr_auth >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0048 auth_type : 44 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0049 auth_level : 06 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 004a auth_pad_len : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 004b auth_reserved: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 004c auth_context_id: 00000001 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00d >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=182 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=9 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 100 (0x64) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 100 (0x64) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=49165 (0xC00D) > smb_bcc=115 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 64 00 14 00 07 00 00 00 B8 .......d ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 44 06 00 00 01 00 00 00 00 .H`....D ........ > [060] 00 00 00 03 00 00 00 54 49 47 52 00 49 42 52 49 .......T IGR.IBRI > [070] 58 32 00 X2. >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,186) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,186) wrote 186 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 144 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 88 (0x58) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 88 (0x58) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=89 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 07 00 00 d....... .X...... > [010] 00 B8 10 B8 10 E5 2C 01 00 0C 00 5C 50 49 50 45 ......,. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ > [050] 00 00 00 00 00 00 00 00 00 ........ . >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 88 (0x58) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 88 (0x58) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=89 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 07 00 00 d....... .X...... > [010] 00 B8 10 B8 10 E5 2C 01 00 0C 00 5C 50 49 50 45 ......,. ...\PIPE > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ > [050] 00 00 00 00 00 00 00 00 00 ........ . >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0058 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000007 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 88 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00d returned 88 bytes. >[2006/07/07 13:00:33, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) > rpc_pipe_bind: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00d bind request returned ok. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 0c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0058 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0010 max_tsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0012 max_rsize: 10b8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 assoc_gid: 00012ce5 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0018 len: 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 001a str: \PIPE\lsass. >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0028 num_results: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 002c result : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 002e reason : 0000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 data : 8a885d04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0034 data : 1ceb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0036 data : 11c9 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0038 data : 9f e8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 003a data : 08 00 2b 10 48 60 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0040 version: 00000002 >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2537) > cli_rpc_pipe_open_schannel_with_key: opened pipe \NETLOGON to machine TIGRDC2.TIGR.ORG for domain TIGR and bound using schannel. >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,45) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,45) wrote 45 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=10 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] libsmb/clientgen.c:cli_rpc_pipe_close(384) > cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 10] libsmb/namequery.c:saf_store(71) > saf_store: domain = [TIGR], server = [TIGRDC2.TIGR.ORG], expire = [1152292533] >[2006/07/07 13:00:33, 10] lib/gencache.c:gencache_set(131) > Adding cache entry with key = SAF/DOMAIN/TIGR; value = TIGRDC2.TIGR.ORG and timeout = Fri Jul 7 13:15:33 2006 > (900 seconds ahead) >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_step(148) > sequence = 0x44ae9333 >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_step(150) > seed: 11A555737A7F8E0B >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_step(155) > seed+seq 443804B87A7F8E0B >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_step(159) > CLIENT 1E605E2ACAB9A114 >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_step(164) > seed+seq+1 453804B87A7F8E0B >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_step(168) > SERVER CBC8BB98FB5C3E4C >[2006/07/07 13:00:33, 5] libsmb/credentials.c:creds_reseed(238) > cred_reseed: seed 453804B87A7F8E0B >[2006/07/07 13:00:33, 5] rpc_parse/parse_net.c:init_id_info2(1181) > init_id_info2: 1181 >[2006/07/07 13:00:33, 5] rpc_parse/parse_misc.c:init_logon_id(1588) > make_logon_id: 1588 >[2006/07/07 13:00:33, 5] rpc_parse/parse_net.c:init_sam_info(1275) > init_sam_info: 1275 >[2006/07/07 13:00:33, 5] rpc_parse/parse_misc.c:init_clnt_info2(1503) > make_clnt_info: 1503 >[2006/07/07 13:00:33, 5] rpc_parse/parse_misc.c:init_clnt_srv(1348) > init_clnt_srv: 1348 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_q_sam_logon >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_sam_info >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_clnt_info2 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_clnt_srv >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 undoc_buffer : 00000001 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 unistr2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 uni_max_len: 00000013 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c uni_str_len: 00000013 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0010 buffer : \.\.T.I.G.R.D.C.2...T.I.G.R...O.R.G... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0038 undoc_buffer2: 00000001 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 00003c smb_io_unistr2 unistr2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 003c uni_max_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0040 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0044 uni_str_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0048 buffer : I.B.R.I.X.2... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0058 ptr_cred: 00000001 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00005c smb_io_cred >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 00005c smb_io_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 005c data: 1e 60 5e 2a ca b9 a1 14 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000064 smb_io_utime >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0064 time: 44ae9333 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0068 ptr_rtn_cred : 00000001 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00006c smb_io_cred >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00006c smb_io_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 006c data: 00 00 00 00 00 00 00 00 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000074 smb_io_utime >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0074 time: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0078 logon_level : 0002 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00007a smb_io_sam_info_ctr logon_info >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 007a switch_value : 0002 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 00007c net_io_id_info2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 007c ptr_id_info2: 00000001 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000080 smb_io_unihdr unihdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0080 uni_str_len: 0008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0082 uni_max_len: 0008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0084 buffer : 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0088 param_ctrl: 00000000 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 00008c smb_io_logon_id >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 008c low : 0000dead >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0090 high: 0000beef >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000094 smb_io_unihdr unihdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0094 uni_str_len: 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0096 uni_max_len: 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0098 buffer : 00000001 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 00009c smb_io_unihdr unihdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 009c uni_str_len: 0018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 009e uni_max_len: 0018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00a0 buffer : 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 00a4 lm_chal: 3b 86 0c f8 c5 c5 eb 80 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000ac smb_io_strhdr hdr_nt_chal_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00ac str_str_len: 004c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00ae str_max_len: 004c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00b0 buffer : 00000001 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000b4 smb_io_strhdr hdr_lm_chal_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00b4 str_str_len: 0018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00b6 str_max_len: 0018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00b8 buffer : 00000001 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000bc smb_io_unistr2 uni_domain_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00bc uni_max_len: 00000004 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c0 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c4 uni_str_len: 00000004 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 00c8 buffer : T.I.G.R. >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000d0 smb_io_unistr2 uni_user_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d0 uni_max_len: 00000006 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d4 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d8 uni_str_len: 00000006 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 00dc buffer : R.A.J.E.E.V. >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0000e8 smb_io_unistr2 uni_wksta_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00e8 uni_max_len: 0000000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00ec offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00f0 uni_str_len: 0000000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 00f4 buffer : \.\.r.a.j.e.e.v.-.o.s.x. >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 00010c smb_io_string2 nt_chal_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 010c str_max_len: 0000004c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0110 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0114 str_str_len: 0000004c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_string2(1096) > 0118 buffer : ..'..\.@pS.^.~G.................. ..j.Q.........T.I.G.R.....I.B.R.I.X.2..... >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000164 smb_io_string2 lm_chal_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0164 str_max_len: 00000018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0168 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 016c str_str_len: 00000018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_string2(1096) > 0170 buffer : ..Rj..y..Z...W$r. ..j.Q. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0188 validation_level: 0003 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 01d0 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0020 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 0000018a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0016 opnum : 0002 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 0001a8 smb_io_rpc_hdr_auth hdr_auth >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a8 auth_type : 44 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a9 auth_level : 06 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01aa auth_pad_len : 06 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01ab auth_reserved: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01ac auth_context_id: 00000001 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:add_schannel_auth_footer(1357) > add_schannel_auth_footer: SCHANNEL seq_num=0 >[2006/07/07 13:00:33, 10] rpc_parse/parse_prs.c:schannel_encode(1633) > SCHANNEL: schannel_encode seq_num=0 data_len=400 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 0001b0 smb_io_rpc_auth_schannel_chk >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 01b0 sig : 77 00 7a 00 ff ff 00 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 01b8 seq_num: 3e ca 8e 79 d8 57 9d eb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 01c0 packet_digest: 54 9b ab 21 d6 07 b9 51 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 01c8 confounder: e4 f4 45 7f 83 44 8d ef >[2006/07/07 13:00:33, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00d >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=546 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=11 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 464 (0x1D0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 464 (0x1D0) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=49165 (0xC00D) > smb_bcc=479 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 D0 01 20 00 08 00 00 00 8A ........ . ...... > [020] 01 00 00 00 00 02 00 1D 9E BF 62 EB 87 9E D0 AC ........ ..b..... > [030] B1 84 F6 90 C5 8D BE F7 47 73 A6 E1 5C 4E 1D DD ........ Gs..\N.. > [040] C4 CD C8 FE 7C B1 83 59 CA 36 C4 D2 B7 D9 EF 6D ....|..Y .6.....m > [050] 9D E4 8E 7A BB 11 01 44 B3 03 D1 9B 76 0B 2A 2F ...z...D ....v.*/ > [060] 21 75 E6 67 5D 53 49 5F 2B 0B EF 56 0F DA DE FB !u.g]SI_ +..V.... > [070] 6A CD FF BF F7 39 21 A3 D4 4F D7 F8 21 A8 F5 DE j....9!. .O..!... > [080] B4 99 7C F7 8C B1 F2 1C 0D B5 55 3E 0B 46 78 1D ..|..... ..U>.Fx. > [090] E1 3B C5 8F C6 3D 9E 66 E2 BF C9 DC E4 E1 62 87 .;...=.f ......b. > [0A0] CA 18 30 BE 5A 8B E4 5C C1 75 91 7B 0D 6F 6D 75 ..0.Z..\ .u.{.omu > [0B0] 4E 47 2F 3F 5C 37 83 6E E4 7E 5E ED 84 5F CB 30 NG/?\7.n .~^.._.0 > [0C0] 76 B6 F4 F4 31 29 F6 9F AE A7 D0 C5 72 BE 36 7F v...1).. ....r.6. > [0D0] 8E AC F2 04 C7 3F EB 8C BF 35 F1 FF 2E 02 A1 D7 .....?.. .5...... > [0E0] D7 02 A5 31 44 51 A8 DC D6 5E 37 C1 B6 CF B9 5F ...1DQ.. .^7...._ > [0F0] B2 36 56 D1 7F D4 AE 38 9D 12 40 A0 9E 23 54 83 .6V....8 ..@..#T. > [100] BF D0 4A F5 6A BF E1 0E 00 46 16 EB 9F BE 75 CD ..J.j... .F....u. > [110] 23 9D EB 9B BC D3 1E C9 7A 01 3F 71 AC 9E B1 AD #....... z.?q.... > [120] 7C 6D 09 F6 E7 EF 15 2F 3F E4 79 0F 66 8E FE 06 |m...../ ?.y.f... > [130] 00 71 0A 15 D9 52 AC A5 94 17 5D D4 9B 9F 1B 8B .q...R.. ..]..... > [140] 3E F5 E1 FE 0C 5C D6 65 72 7E 67 89 70 04 58 02 >....\.e r~g.p.X. > [150] CE 19 99 8A AF 6D 5F 92 33 19 CE 78 34 8F 7E B6 .....m_. 3..x4.~. > [160] 5D 30 99 9F 3D BC AF D7 D3 F2 9B EA 38 6C F9 A2 ]0..=... ....8l.. > [170] 7E A9 51 AC 8F C8 49 C7 FC 8A D2 D2 83 A1 DD 75 ~.Q...I. .......u > [180] 04 C1 46 B7 15 F0 20 FB D8 92 FD 8E E7 8B 77 47 ..F... . ......wG > [190] 2C 0B EC 7D 43 16 A2 0C 48 F3 94 D4 F5 F8 16 8D ,..}C... H....... > [1A0] 3D 23 50 DC B2 B7 CD 72 B5 B9 A5 15 5F E1 E3 9C =#P....r ...._... > [1B0] C0 64 B2 11 5B BF 1D 44 06 06 00 01 00 00 00 77 .d..[..D .......w > [1C0] 00 7A 00 FF FF 00 00 3E CA 8E 79 D8 57 9D EB 54 .z.....> ..y.W..T > [1D0] 9B AB 21 D6 07 B9 51 E4 F4 45 7F 83 44 8D EF ..!...Q. .E..D.. >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,550) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,550) wrote 550 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 1144 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=1144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 1088 (0x440) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 1088 (0x440) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=1089 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] D0 05 00 02 03 10 00 00 00 40 04 20 00 08 00 00 ........ .@. .... > [010] 00 F8 03 00 00 00 00 00 00 36 F6 80 FA E7 07 8F ........ .6...... > [020] A0 3B 32 C7 DE C8 C3 7D DD DD 6A 51 1A 41 64 CB .;2....} ..jQ.Ad. > [030] 00 EA 13 A3 1C D8 0C D9 2B B2 62 9B 2B 58 EE B1 ........ +.b.+X.. > [040] 03 46 3F B6 F8 4D 6C BC EF EF 3C 73 8D 93 F0 51 .F?..Ml. ..<s...Q > [050] 78 27 43 FA EF 1D 63 2C 88 5B 79 08 01 6F 3E 13 x'C...c, .[y..o>. > [060] A5 F3 D4 FB F8 43 7A BC DD 57 3E 6F B3 0F E0 D1 .....Cz. .W>o.... > [070] 61 E6 39 6B E1 AD 64 5F EE CA 55 A8 FA 73 70 AF a.9k..d_ ..U..sp. > [080] 24 5F 6A 22 80 42 3B AE 61 60 8E EE 95 B6 57 1C $_j".B;. a`....W. > [090] 50 5B 66 E6 8F 0F C9 1F 61 74 A8 63 DA C1 E1 1E P[f..... at.c.... > [0A0] D3 A5 8C C5 BF 31 9C E6 86 A2 90 F4 D7 E5 06 27 .....1.. .......' > [0B0] 49 6B 92 1C 73 EC 96 36 1B 1F 80 1F 8A CF F8 D2 Ik..s..6 ........ > [0C0] CA 72 C7 58 BA F6 CB C5 33 A7 DB 8C 9B 93 DA D4 .r.X.... 3....... > [0D0] BE 07 93 9D 33 4E CF 34 52 55 4A 42 6A AF 17 D2 ....3N.4 RUJBj... > [0E0] CD A2 59 E2 32 CD 81 FC 49 84 0F 77 56 64 FD 1A ..Y.2... I..wVd.. > [0F0] 5A 89 96 77 0E 4E 17 F5 42 C7 D7 89 0D 7C 58 E5 Z..w.N.. B....|X. > [100] F3 94 06 A0 EF 07 04 E2 A2 F3 A6 7A F2 13 10 4A ........ ...z...J > [110] 74 38 0D FB 2F 88 0D 5C 37 93 4F 0C 1E 99 55 88 t8../..\ 7.O...U. > [120] 1E 17 B3 C2 B1 0F FD B7 22 66 26 4D E3 B9 98 B7 ........ "f&M.... > [130] 8F 7A 04 C6 EF 93 9F 26 BD 66 F1 9C 44 F8 25 2D .z.....& .f..D.%- > [140] 7D 2C 74 D2 49 A2 84 DC AF 3D DC AD EE 41 DB 5D },t.I... .=...A.] > [150] B6 0D AD 3C 5F 0D 1F CD 50 0B B3 4F 8F FB D8 DF ...<_... P..O.... > [160] 64 E4 39 2E 56 75 38 EA 7A 66 CB F4 8E DC FB D8 d.9.Vu8. zf...... > [170] 7C 2B D7 19 F5 AC 7D C3 CB 01 0D 2C CF 67 56 3E |+....}. ...,.gV> > [180] 43 ED 59 67 1B 58 5B 9C 3C 77 F4 26 0F C0 CA C7 C.Yg.X[. <w.&.... > [190] E6 6D EB 06 F7 23 7E 1F 5B 07 E8 6D 02 64 B1 8A .m...#~. [..m.d.. > [1A0] 8B 54 30 DB E5 6D D1 34 1D 55 C0 91 A7 75 FA D4 .T0..m.4 .U...u.. > [1B0] C7 F6 24 64 CE BC 8C 46 9C 47 11 2A DA 22 13 B0 ..$d...F .G.*.".. > [1C0] 7A 5D B8 5C B3 DF 69 8D 5B 3F 9E 98 4E D6 E0 9C z].\..i. [?..N... > [1D0] 81 E7 21 5D 6F D8 9C 8C 6D 69 22 7F AF AC 91 FA ..!]o... mi"..... > [1E0] 6C 24 48 14 7C 5E 0E CE EC 00 A3 1B F4 C6 C8 52 l$H.|^.. .......R > [1F0] C1 FE 01 4F 5E CA C6 04 7D A0 7F 09 85 9D BF FF ...O^... }....... >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=1144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 1088 (0x440) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 1088 (0x440) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=1089 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] D0 05 00 02 03 10 00 00 00 40 04 20 00 08 00 00 ........ .@. .... > [010] 00 F8 03 00 00 00 00 00 00 36 F6 80 FA E7 07 8F ........ .6...... > [020] A0 3B 32 C7 DE C8 C3 7D DD DD 6A 51 1A 41 64 CB .;2....} ..jQ.Ad. > [030] 00 EA 13 A3 1C D8 0C D9 2B B2 62 9B 2B 58 EE B1 ........ +.b.+X.. > [040] 03 46 3F B6 F8 4D 6C BC EF EF 3C 73 8D 93 F0 51 .F?..Ml. ..<s...Q > [050] 78 27 43 FA EF 1D 63 2C 88 5B 79 08 01 6F 3E 13 x'C...c, .[y..o>. > [060] A5 F3 D4 FB F8 43 7A BC DD 57 3E 6F B3 0F E0 D1 .....Cz. .W>o.... > [070] 61 E6 39 6B E1 AD 64 5F EE CA 55 A8 FA 73 70 AF a.9k..d_ ..U..sp. > [080] 24 5F 6A 22 80 42 3B AE 61 60 8E EE 95 B6 57 1C $_j".B;. a`....W. > [090] 50 5B 66 E6 8F 0F C9 1F 61 74 A8 63 DA C1 E1 1E P[f..... at.c.... > [0A0] D3 A5 8C C5 BF 31 9C E6 86 A2 90 F4 D7 E5 06 27 .....1.. .......' > [0B0] 49 6B 92 1C 73 EC 96 36 1B 1F 80 1F 8A CF F8 D2 Ik..s..6 ........ > [0C0] CA 72 C7 58 BA F6 CB C5 33 A7 DB 8C 9B 93 DA D4 .r.X.... 3....... > [0D0] BE 07 93 9D 33 4E CF 34 52 55 4A 42 6A AF 17 D2 ....3N.4 RUJBj... > [0E0] CD A2 59 E2 32 CD 81 FC 49 84 0F 77 56 64 FD 1A ..Y.2... I..wVd.. > [0F0] 5A 89 96 77 0E 4E 17 F5 42 C7 D7 89 0D 7C 58 E5 Z..w.N.. B....|X. > [100] F3 94 06 A0 EF 07 04 E2 A2 F3 A6 7A F2 13 10 4A ........ ...z...J > [110] 74 38 0D FB 2F 88 0D 5C 37 93 4F 0C 1E 99 55 88 t8../..\ 7.O...U. > [120] 1E 17 B3 C2 B1 0F FD B7 22 66 26 4D E3 B9 98 B7 ........ "f&M.... > [130] 8F 7A 04 C6 EF 93 9F 26 BD 66 F1 9C 44 F8 25 2D .z.....& .f..D.%- > [140] 7D 2C 74 D2 49 A2 84 DC AF 3D DC AD EE 41 DB 5D },t.I... .=...A.] > [150] B6 0D AD 3C 5F 0D 1F CD 50 0B B3 4F 8F FB D8 DF ...<_... P..O.... > [160] 64 E4 39 2E 56 75 38 EA 7A 66 CB F4 8E DC FB D8 d.9.Vu8. zf...... > [170] 7C 2B D7 19 F5 AC 7D C3 CB 01 0D 2C CF 67 56 3E |+....}. ...,.gV> > [180] 43 ED 59 67 1B 58 5B 9C 3C 77 F4 26 0F C0 CA C7 C.Yg.X[. <w.&.... > [190] E6 6D EB 06 F7 23 7E 1F 5B 07 E8 6D 02 64 B1 8A .m...#~. [..m.d.. > [1A0] 8B 54 30 DB E5 6D D1 34 1D 55 C0 91 A7 75 FA D4 .T0..m.4 .U...u.. > [1B0] C7 F6 24 64 CE BC 8C 46 9C 47 11 2A DA 22 13 B0 ..$d...F .G.*.".. > [1C0] 7A 5D B8 5C B3 DF 69 8D 5B 3F 9E 98 4E D6 E0 9C z].\..i. [?..N... > [1D0] 81 E7 21 5D 6F D8 9C 8C 6D 69 22 7F AF AC 91 FA ..!]o... mi"..... > [1E0] 6C 24 48 14 7C 5E 0E CE EC 00 A3 1B F4 C6 C8 52 l$H.|^.. .......R > [1F0] C1 FE 01 4F 5E CA C6 04 7D A0 7F 09 85 9D BF FF ...O^... }....... >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0000 major : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0001 minor : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0002 pkt_type : 02 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0003 flags : 03 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0004 pack_type0: 10 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0005 pack_type1: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0006 pack_type2: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0007 pack_type3: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0008 frag_len : 0440 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 000a auth_len : 0020 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c call_id : 00000008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 alloc_hint: 000003f8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0014 context_id: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0016 cancel_ct : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0017 reserved : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000418 smb_io_rpc_hdr_auth hdr_auth >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0418 auth_type : 44 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0419 auth_level : 06 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 041a auth_pad_len : 08 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 041b auth_reserved: 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 041c auth_context_id: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000420 smb_io_rpc_auth_schannel_chk >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0420 sig : 77 00 7a 00 ff ff 00 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0428 seq_num: 8d b4 86 1b e9 0f 2d b0 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0430 packet_digest: 7d 46 67 18 db dc 4e f7 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0438 confounder: 0e 55 ee b3 47 4b ce 62 >[2006/07/07 13:00:33, 10] rpc_parse/parse_prs.c:schannel_decode(1710) > SCHANNEL: schannel_decode seq_num=1 data_len=1024 >[2006/07/07 13:00:33, 10] rpc_parse/parse_prs.c:schannel_decode(1730) > SCHANNEL: schannel_decode seq_num=1 data_len=1024 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 1088, data_len 1016, ss_len 8 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 1088 at offset 0 >[2006/07/07 13:00:33, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine TIGRDC2.TIGR.ORG pipe \NETLOGON fnum 0xc00d returned 2032 bytes. >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 net_io_r_sam_logon >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 buffer_creds: 00020000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_cred >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_chal >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0004 data: cb c8 bb 98 fb 5c 3e 4c >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00000c smb_io_utime >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c time: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0010 switch_value: 0003 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000014 net_io_user_info3 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 ptr_user_info : 00020004 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_time logon time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0018 low : 16f6c2a1 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 001c high: 01c6a125 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_time logoff time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0020 low : ffffffff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0024 high: 7fffffff >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000028 smb_io_time kickoff time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0028 low : ffffffff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 002c high: 7fffffff >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_time last set time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 low : 09fac924 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0034 high: 01c6868d >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_time can change time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0038 low : 09fac924 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 003c high: 01c6868d >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000040 smb_io_time must change time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0040 low : ffffffff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0044 high: 7fffffff >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_unihdr hdr_user_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0048 uni_str_len: 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 004a uni_max_len: 000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 004c buffer : 00020008 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_unihdr hdr_full_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0050 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0052 uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0054 buffer : 00000000 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000058 smb_io_unihdr hdr_logon_script >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0058 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 005a uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 005c buffer : 00000000 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000060 smb_io_unihdr hdr_profile_path >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0060 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0062 uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0064 buffer : 00000000 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000068 smb_io_unihdr hdr_home_dir >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0068 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 006a uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 006c buffer : 00000000 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000070 smb_io_unihdr hdr_dir_drive >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0070 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0072 uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0074 buffer : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0078 logon_count : 096c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 007a bad_pw_count : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 007c user_rid : 00000c2a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0080 group_rid : 00000201 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0084 num_groups : 0000000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0088 buffer_groups : 0002000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 008c user_flgs : 00000120 >[2006/07/07 13:00:33, 10] rpc_parse/parse_net.c:dump_user_flgs(1555) > dump_user_flgs > account has LOGON_EXTRA_SIDS > account has LOGON_NTLMV2_ENABLED >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0090 user_sess_key: 8b 32 0e d5 d5 3a 4c a3 6a c6 9b e9 cb 87 d6 99 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000a0 smb_io_unihdr hdr_logon_srv >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00a0 uni_str_len: 000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00a2 uni_max_len: 0010 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00a4 buffer : 00020010 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000a8 smb_io_unihdr hdr_logon_dom >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00a8 uni_str_len: 0008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 00aa uni_max_len: 000a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00ac buffer : 00020014 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00b0 buffer_dom_id : 00020018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 00b4 lm_sess_key: 8b 32 0e d5 d5 3a 4c a3 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00bc acct_flags : 00000210 >[2006/07/07 13:00:33, 10] rpc_parse/parse_net.c:dump_acct_flags(1528) > dump_acct_flags > account has ACB_NORMAL > account has ACB_PWNOEXP >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c0 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c4 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c8 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00cc unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d0 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d4 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d8 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00dc num_other_sids: 0000000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00e0 buffer_other_sids: 0002001c >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000e4 smb_io_unistr2 uni_user_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00e4 uni_max_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00e8 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00ec uni_str_len: 00000006 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 00f0 buffer : r.a.j.e.e.v. >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_full_name >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_logon_script >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_profile_path >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_home_dir >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0000fc smb_io_unistr2 - NULL uni_dir_drive >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00fc num_groups2 : 0000000e >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000100 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0100 g_rid: 0000128a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0104 attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000108 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0108 g_rid: 0000053c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 010c attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000110 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0110 g_rid: 00001bdb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0114 attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000118 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0118 g_rid: 00000d53 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 011c attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000120 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0120 g_rid: 00000fa7 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0124 attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000128 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0128 g_rid: 00000fa8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 012c attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000130 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0130 g_rid: 0000169a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0134 attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000138 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0138 g_rid: 0000055e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 013c attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000140 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0140 g_rid: 00000555 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0144 attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000148 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0148 g_rid: 00000540 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 014c attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000150 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0150 g_rid: 00000fdd >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0154 attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000158 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0158 g_rid: 00000201 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 015c attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000160 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0160 g_rid: 0000055c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0164 attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000168 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0168 g_rid: 0000051b >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 016c attr : 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000170 smb_io_unistr2 uni_logon_srv >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0170 uni_max_len: 00000008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0174 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0178 uni_str_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 017c buffer : T.I.G.R.D.C.2. >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00018a smb_io_unistr2 uni_logon_dom >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 018c uni_max_len: 00000005 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0190 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0194 uni_str_len: 00000004 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0198 buffer : T.I.G.R. >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0001a0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01a0 num_auths: 00000004 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0001a4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a5 num_auths : 04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01a9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01aa id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 01ab id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 01ac sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01bc num_other_sids: 0000000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01c0 sid_ptr: 00020020 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01c4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01c8 sid_ptr: 00020024 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01cc attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01d0 sid_ptr: 00020028 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01d4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01d8 sid_ptr: 0002002c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01dc attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01e0 sid_ptr: 00020030 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01e4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01e8 sid_ptr: 00020034 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01ec attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01f0 sid_ptr: 00020038 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01f4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01f8 sid_ptr: 0002003c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01fc attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0200 sid_ptr: 00020040 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0204 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0208 sid_ptr: 00020044 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 020c attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0210 sid_ptr: 00020048 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0214 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0218 sid_ptr: 0002004c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 021c attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0220 sid_ptr: 00020050 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0224 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0228 sid_ptr: 00020054 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 022c attribute: 00000007 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000230 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0230 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000234 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0234 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0235 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0236 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0237 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0238 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0239 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 023a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 023b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 023c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000250 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0250 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000254 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0254 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0255 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0256 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0257 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0258 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0259 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 025a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 025b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 025c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000270 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0270 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000274 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0274 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0275 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0276 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0277 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0278 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0279 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 027a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 027b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 027c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000290 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0290 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000294 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0294 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0295 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0296 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0297 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0298 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0299 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 029a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 029b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 029c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002b0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 02b0 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0002b4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02b4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02b5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02b6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02b7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02b8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02b9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02ba id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02bb id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 02bc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002d0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 02d0 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0002d4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02d4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02d5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02d6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02d7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02d8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02d9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02da id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02db id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 02dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 02f0 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0002f4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02f4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02f5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02f6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02f7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02f8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02f9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02fa id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02fb id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 02fc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000310 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0310 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000314 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0314 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0315 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0316 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0317 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0318 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0319 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 031a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 031b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 031c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000330 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0330 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000334 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0334 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0335 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0336 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0337 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0338 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0339 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 033a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 033b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 033c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000350 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0350 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000354 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0354 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0355 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0356 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0357 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0358 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0359 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 035a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 035b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 035c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000370 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0370 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000374 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0374 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0375 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0376 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0377 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0378 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0379 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 037a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 037b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 037c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000390 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0390 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000394 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0394 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0395 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0396 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0397 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0398 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0399 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 039a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 039b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 039c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003b0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 03b0 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0003b4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03b4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03b5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03b6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03b7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03b8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03b9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03ba id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03bb id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 03bc sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003d0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 03d0 num_auths: 00000005 >[2006/07/07 13:00:33, 9] rpc_parse/parse_prs.c:prs_debug(84) > 0003d4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03d4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03d5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03d6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03d7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03d8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03d9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03da id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03db id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 03dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 03f0 auth_resp : 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_ntstatus(763) > 03f4 status : NT_STATUS_OK >[2006/07/07 13:00:33, 10] libsmb/credentials.c:creds_client_check(325) > creds_client_check: credentials check OK. >[2006/07/07 13:00:33, 10] passdb/secrets.c:secrets_named_mutex_release(791) > secrets_named_mutex: released mutex for TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 4] smbd/map_username.c:map_username(111) > Scanning username map /etc/samba/username.map >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(465) > user_in_list: checking user TIGR\rajeev in list >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(470) > user_in_list: checking user |TIGR\rajeev| against |TIGR\rajeev| >[2006/07/07 13:00:33, 3] smbd/map_username.c:map_username(155) > Mapped user TIGR\rajeev to rajeev >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(465) > user_in_list: checking user rajeev in list >[2006/07/07 13:00:33, 10] smbd/password.c:user_in_list(470) > user_in_list: checking user |rajeev| against |TIGR\tigradm| >[2006/07/07 13:00:33, 5] lib/username.c:Get_Pwnam_alloc(131) > Finding user rajeev >[2006/07/07 13:00:33, 5] lib/username.c:Get_Pwnam_internals(75) > Trying _Get_Pwnam(), username as lowercase is rajeev >[2006/07/07 13:00:33, 5] lib/username.c:Get_Pwnam_internals(108) > Get_Pwnam_internals did find user [rajeev]! >[2006/07/07 13:00:33, 5] auth/auth_util.c:fill_sam_account(1475) > fill_sam_account: located username was [rajeev] >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_username(534) > pdb_set_username: setting username rajeev, was >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_fullname(603) > pdb_set_full_name: setting full name Rajeev Karamchedu, was >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_domain(557) > pdb_set_domain: setting domain IBRIX2, was >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 40 -> S-1-5-21-3229423953-1919848741-1350197535-1081 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 40 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1081 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 40 -> S-1-5-21-3229423953-1919848741-1350197535-1081 >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_group_sid(521) > pdb_set_group_sid: setting group sid S-1-5-21-3229423953-1919848741-1350197535-1081 >[2006/07/07 13:00:33, 4] lib/substitute.c:automount_server(407) > Home server: ibrix2 >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_profile_path(649) > pdb_set_profile_path: setting profile path \\ibrix2\rajeev\profile, was >[2006/07/07 13:00:33, 4] lib/substitute.c:automount_server(407) > Home server: ibrix2 >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_homedir(696) > pdb_set_homedir: setting home dir \\ibrix2\rajeev, was >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(672) > pdb_set_dir_drive: setting dir drive , was NULL >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_logon_script(626) > pdb_set_logon_script: setting logon script , was >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_user_sid(463) > pdb_set_user_sid: setting user sid S-1-5-21-3229423953-1919848741-1350197535-4036 >[2006/07/07 13:00:33, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-3229423953-1919848741-1350197535-4036 from rid 4036 >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_nt_username(580) > pdb_set_nt_username: setting nt username rajeev, was >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_username(534) > pdb_set_username: setting username rajeev, was rajeev >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_domain(557) > pdb_set_domain: setting domain TIGR, was IBRIX2 >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_user_sid(463) > pdb_set_user_sid: setting user sid S-1-5-21-2867130070-3872911017-3508780997-3114 >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_group_sid(521) > pdb_set_group_sid: setting group sid S-1-5-21-3229423953-1919848741-1350197535-513 >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_fullname(603) > pdb_set_full_name: setting full name , was Rajeev Karamchedu >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_logon_script(626) > pdb_set_logon_script: setting logon script , was >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_profile_path(649) > pdb_set_profile_path: setting profile path , was \\ibrix2\rajeev\profile >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_homedir(696) > pdb_set_homedir: setting home dir , was \\ibrix2\rajeev >[2006/07/07 13:00:33, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(672) > pdb_set_dir_drive: setting dir drive , was >[2006/07/07 13:00:33, 10] libsmb/samlogon_cache.c:netsamlogon_cache_store(134) > netsamlogon_cache_store: SID [S-1-5-21-2867130070-3872911017-3508780997-3114] >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0000 timestamp: 44ae9331 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000004 net_io_user_info3 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 ptr_user_info : 00020004 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 smb_io_time logon time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 low : 16f6c2a1 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c high: 01c6a125 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_time logoff time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 low : ffffffff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0014 high: 7fffffff >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_time kickoff time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0018 low : ffffffff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 001c high: 7fffffff >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_time last set time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0020 low : 09fac924 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0024 high: 01c6868d >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000028 smb_io_time can change time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0028 low : 09fac924 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 002c high: 01c6868d >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_time must change time >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0030 low : ffffffff >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0034 high: 7fffffff >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_unihdr hdr_user_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0038 uni_str_len: 000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 003a uni_max_len: 000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 003c buffer : 00020008 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000040 smb_io_unihdr hdr_full_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0040 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0042 uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0044 buffer : 00000000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_unihdr hdr_logon_script >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0048 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 004a uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 004c buffer : 00000000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_unihdr hdr_profile_path >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0050 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0052 uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0054 buffer : 00000000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000058 smb_io_unihdr hdr_home_dir >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0058 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 005a uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 005c buffer : 00000000 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000060 smb_io_unihdr hdr_dir_drive >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0060 uni_str_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0062 uni_max_len: 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0064 buffer : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0068 logon_count : 096c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 006a bad_pw_count : 0000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 006c user_rid : 00000c2a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0070 group_rid : 00000201 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0074 num_groups : 0000000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0078 buffer_groups : 0002000c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 007c user_flgs : 00000120 >[2006/07/07 13:00:33, 10] rpc_parse/parse_net.c:dump_user_flgs(1555) > dump_user_flgs > account has LOGON_EXTRA_SIDS > account has LOGON_NTLMV2_ENABLED >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 0080 user_sess_key: 6c d8 4a 94 1b 2b 9c fc d9 b5 87 1a b7 57 bd 56 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000090 smb_io_unihdr hdr_logon_srv >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0090 uni_str_len: 000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0092 uni_max_len: 0010 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0094 buffer : 00020010 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000098 smb_io_unihdr hdr_logon_dom >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0098 uni_str_len: 0008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 009a uni_max_len: 000a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 009c buffer : 00020014 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00a0 buffer_dom_id : 00020018 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8s(851) > 00a4 lm_sess_key: 6c d8 4a 94 1b 2b 9c fc >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00ac acct_flags : 00000210 >[2006/07/07 13:00:33, 10] rpc_parse/parse_net.c:dump_acct_flags(1528) > dump_acct_flags > account has ACB_NORMAL > account has ACB_PWNOEXP >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00b0 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00b4 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00b8 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00bc unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c0 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c4 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00c8 unkown: 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00cc num_other_sids: 0000000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d0 buffer_other_sids: 0002001c >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000d4 smb_io_unistr2 uni_user_name >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d4 uni_max_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00d8 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00dc uni_str_len: 00000006 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 00e0 buffer : r.a.j.e.e.v. >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_full_name >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_logon_script >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_profile_path >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_home_dir >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000ec smb_io_unistr2 - NULL uni_dir_drive >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00ec num_groups2 : 0000000e >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000f0 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00f0 g_rid: 0000128a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00f4 attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 0000f8 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00f8 g_rid: 0000053c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 00fc attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000100 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0100 g_rid: 00001bdb >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0104 attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000108 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0108 g_rid: 00000d53 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 010c attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000110 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0110 g_rid: 00000fa7 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0114 attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000118 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0118 g_rid: 00000fa8 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 011c attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000120 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0120 g_rid: 0000169a >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0124 attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000128 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0128 g_rid: 0000055e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 012c attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000130 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0130 g_rid: 00000555 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0134 attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000138 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0138 g_rid: 00000540 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 013c attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000140 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0140 g_rid: 00000fdd >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0144 attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000148 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0148 g_rid: 00000201 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 014c attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000150 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0150 g_rid: 0000055c >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0154 attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000158 smb_io_gid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0158 g_rid: 0000051b >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 015c attr : 00000007 >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000160 smb_io_unistr2 uni_logon_srv >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0160 uni_max_len: 00000008 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0164 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0168 uni_str_len: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 016c buffer : T.I.G.R.D.C.2. >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00017a smb_io_unistr2 uni_logon_dom >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 017c uni_max_len: 00000005 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0180 offset : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0184 uni_str_len: 00000004 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:dbg_rw_punival(936) > 0188 buffer : T.I.G.R. >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000190 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0190 num_auths: 00000004 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000194 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0194 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0195 num_auths : 04 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0196 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0197 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0198 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0199 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 019a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 019b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 019c sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01ac num_other_sids: 0000000e >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01b0 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01b4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01b8 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01bc attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01c0 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01c4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01c8 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01cc attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01d0 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01d4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01d8 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01dc attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01e0 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01e4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01e8 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01ec attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01f0 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01f4 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01f8 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 01fc attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0200 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0204 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0208 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 020c attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0210 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0214 attribute: 00000007 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0218 sid_ptr: 00000001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 021c attribute: 00000007 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000220 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0220 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000224 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0224 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0225 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0226 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0227 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0228 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0229 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 022a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 022b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 022c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000240 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0240 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000244 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0244 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0245 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0246 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0247 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0248 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0249 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 024a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 024b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 024c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000260 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0260 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000264 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0264 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0265 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0266 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0267 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0268 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0269 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 026a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 026b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 026c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000280 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0280 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000284 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0284 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0285 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0286 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0287 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0288 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0289 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 028a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 028b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 028c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0002a0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 02a0 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002a4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02a4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02a5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02a6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02a7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02a8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02a9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02aa id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02ab id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 02ac sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0002c0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 02c0 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002c4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02c4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02c5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02c6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02c7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02c8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02c9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02ca id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02cb id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 02cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0002e0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 02e0 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002e4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02e4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02e5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02e6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02e7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02e8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02e9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02ea id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 02eb id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 02ec sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000300 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0300 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000304 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0304 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0305 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0306 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0307 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0308 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0309 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 030a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 030b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 030c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000320 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0320 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000324 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0324 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0325 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0326 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0327 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0328 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0329 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 032a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 032b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 032c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000340 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0340 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000344 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0344 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0345 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0346 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0347 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0348 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0349 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 034a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 034b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 034c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000360 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0360 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000364 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0364 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0365 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0366 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0367 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0368 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0369 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 036a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 036b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 036c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000380 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0380 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000384 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0384 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0385 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0386 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0387 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0388 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0389 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 038a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 038b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 038c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0003a0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 03a0 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003a4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03a4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03a5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03a6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03a7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03a8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03a9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03aa id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03ab id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 03ac sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 0003c0 smb_io_dom_sid2 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 03c0 num_auths: 00000005 >[2006/07/07 13:00:33, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0003c4 smb_io_dom_sid sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03c4 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03c5 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03c6 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03c7 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03c8 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03c9 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03ca id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 03cb id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 03cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,45) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,45) wrote 45 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=12 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] libsmb/clientgen.c:cli_rpc_pipe_close(384) > cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2.TIGR.ORG >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(132) > write_socket(19,39) >[2006/07/07 13:00:33, 6] libsmb/clientgen.c:write_socket(135) > write_socket(19,39) wrote 39 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=47111 > smb_pid=8053 > smb_uid=12290 > smb_mid=13 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 3] auth/auth.c:check_ntlm_password(270) > check_ntlm_password: winbind authentication for user [RAJEEV] succeeded >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:push_sec_ctx(208) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 3] smbd/uid.c:push_conn_ctx(345) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:pop_sec_ctx(339) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 5] auth/auth.c:check_ntlm_password(296) > check_ntlm_password: PAM Account for user [rajeev] succeeded >[2006/07/07 13:00:33, 2] auth/auth.c:check_ntlm_password(309) > check_ntlm_password: authentication for user [RAJEEV] -> [RAJEEV] -> [rajeev] succeeded >[2006/07/07 13:00:33, 5] auth/auth_util.c:free_user_info(1809) > attempting to free (and zero) a user_info structure >[2006/07/07 13:00:33, 10] auth/auth_util.c:free_user_info(1813) > structure was created for RAJEEV >[2006/07/07 13:00:33, 10] passdb/util_wellknown.c:lookup_wellknown_name(154) > map_name_to_wellknown_sid: looking up rajeev >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:push_sec_ctx(208) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 3] smbd/uid.c:push_conn_ctx(345) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1313) > getsampwnam (smbpasswd): search by name: rajeev >[2006/07/07 13:00:33, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) > startsmbfilepwent_internal: opening file /usr/local/samba/private/smbpasswd >[2006/07/07 13:00:33, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(539) > getsmbfilepwent: end of file reached. >[2006/07/07 13:00:33, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) > endsmbfilepwent_internal: closed password file. >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:pop_sec_ctx(339) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:push_sec_ctx(208) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 3] smbd/uid.c:push_conn_ctx(345) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:pop_sec_ctx(339) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 10] lib/util_pw.c:getpwnam_alloc(76) > Got rajeev from pwnam_cache >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:sid_to_uid(1206) > sid_to_uid: S-1-22-1-1518 -> 1518 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(979) > fetch sid from gid cache 40 -> S-1-5-21-3229423953-1919848741-1350197535-1081 >[2006/07/07 13:00:33, 10] lib/system_smbd.c:sys_getgrouplist(125) > sys_getgrouplist: user [rajeev] >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:push_sec_ctx(208) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 3] smbd/uid.c:push_conn_ctx(345) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:pop_sec_ctx(339) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(979) > fetch sid from gid cache 40 -> S-1-5-21-3229423953-1919848741-1350197535-1081 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(979) > fetch sid from gid cache 0 -> S-1-5-21-3229423953-1919848741-1350197535-1001 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 14 -> S-1-5-21-3229423953-1919848741-1350197535-1029 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 14 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1029 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 60 -> S-1-5-21-3229423953-1919848741-1350197535-1121 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 60 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1121 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 63 -> S-1-5-21-3229423953-1919848741-1350197535-1127 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 63 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1127 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 80 -> S-1-5-21-3229423953-1919848741-1350197535-1161 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 80 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1161 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 120 -> S-1-5-21-3229423953-1919848741-1350197535-1241 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 120 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1241 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 130 -> S-1-5-21-3229423953-1919848741-1350197535-1261 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 130 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1261 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 160 -> S-1-5-21-3229423953-1919848741-1350197535-1321 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 160 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1321 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 162 -> S-1-5-21-3229423953-1919848741-1350197535-1325 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 162 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1325 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 167 -> S-1-5-21-3229423953-1919848741-1350197535-1335 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 167 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1335 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 170 -> S-1-5-21-3229423953-1919848741-1350197535-1341 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 170 in cache -> S-1-5-21-3229423953-1919848741-1350197535-1341 >[2006/07/07 13:00:33, 10] passdb/lookup_sid.c:gid_to_sid(1128) > gid_to_sid: local 1025 -> S-1-5-21-3229423953-1919848741-1350197535-3051 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) > store_gid_sid_cache: gid 1025 in cache -> S-1-5-21-3229423953-1919848741-1350197535-3051 >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-22-1-1518] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1081] >[2006/07/07 13:00:33, 5] lib/privileges.c:get_privileges_for_sids(459) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-11] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1001] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1029] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1121] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1127] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1161] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1241] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1261] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1321] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1325] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1335] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-1341] >[2006/07/07 13:00:33, 3] lib/privileges.c:get_privileges(261) > get_privileges: No privileges assigned to SID [S-1-5-21-3229423953-1919848741-1350197535-3051] >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 40 -> S-1-5-21-3229423953-1919848741-1350197535-1081 >[2006/07/07 13:00:33, 10] auth/auth_util.c:create_local_token(995) > Could not convert SID S-1-1-0 to gid, ignoring it >[2006/07/07 13:00:33, 10] auth/auth_util.c:create_local_token(995) > Could not convert SID S-1-5-2 to gid, ignoring it >[2006/07/07 13:00:33, 10] auth/auth_util.c:create_local_token(995) > Could not convert SID S-1-5-11 to gid, ignoring it >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 0 -> S-1-5-21-3229423953-1919848741-1350197535-1001 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 14 -> S-1-5-21-3229423953-1919848741-1350197535-1029 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 60 -> S-1-5-21-3229423953-1919848741-1350197535-1121 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 63 -> S-1-5-21-3229423953-1919848741-1350197535-1127 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 80 -> S-1-5-21-3229423953-1919848741-1350197535-1161 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 120 -> S-1-5-21-3229423953-1919848741-1350197535-1241 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 130 -> S-1-5-21-3229423953-1919848741-1350197535-1261 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 160 -> S-1-5-21-3229423953-1919848741-1350197535-1321 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 162 -> S-1-5-21-3229423953-1919848741-1350197535-1325 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 167 -> S-1-5-21-3229423953-1919848741-1350197535-1335 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 170 -> S-1-5-21-3229423953-1919848741-1350197535-1341 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) > fetch gid from cache 1025 -> S-1-5-21-3229423953-1919848741-1350197535-3051 >[2006/07/07 13:00:33, 10] auth/auth_util.c:debug_nt_user_token(455) > NT user token of user S-1-22-1-1518 > contains 17 SIDs > SID[ 0]: S-1-22-1-1518 > SID[ 1]: S-1-5-21-3229423953-1919848741-1350197535-1081 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-3229423953-1919848741-1350197535-1001 > SID[ 6]: S-1-5-21-3229423953-1919848741-1350197535-1029 > SID[ 7]: S-1-5-21-3229423953-1919848741-1350197535-1121 > SID[ 8]: S-1-5-21-3229423953-1919848741-1350197535-1127 > SID[ 9]: S-1-5-21-3229423953-1919848741-1350197535-1161 > SID[ 10]: S-1-5-21-3229423953-1919848741-1350197535-1241 > SID[ 11]: S-1-5-21-3229423953-1919848741-1350197535-1261 > SID[ 12]: S-1-5-21-3229423953-1919848741-1350197535-1321 > SID[ 13]: S-1-5-21-3229423953-1919848741-1350197535-1325 > SID[ 14]: S-1-5-21-3229423953-1919848741-1350197535-1335 > SID[ 15]: S-1-5-21-3229423953-1919848741-1350197535-1341 > SID[ 16]: S-1-5-21-3229423953-1919848741-1350197535-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/07/07 13:00:33, 10] smbd/password.c:register_vuid(186) > register_vuid: allocated vuid = 100 >[2006/07/07 13:00:33, 10] lib/util_pw.c:getpwnam_alloc(76) > Got rajeev from pwnam_cache >[2006/07/07 13:00:33, 10] smbd/password.c:register_vuid(277) > register_vuid: (1518,40) rajeev RAJEEV TIGR guest=0 >[2006/07/07 13:00:33, 3] smbd/password.c:register_vuid(280) > User name: rajeev Real name: >[2006/07/07 13:00:33, 3] smbd/password.c:register_vuid(301) > UNIX uid 1518 is UNIX user rajeev, and will be vuid 100 >[2006/07/07 13:00:33, 7] param/loadparm.c:lp_servicenumber(5112) > lp_servicenumber: couldn't find rajeev >[2006/07/07 13:00:33, 3] smbd/password.c:register_vuid(332) > Adding homes service for user 'rajeev' using home directory: '/home/rajeev' >[2006/07/07 13:00:33, 7] param/loadparm.c:lp_servicenumber(5112) > lp_servicenumber: couldn't find homes >[2006/07/07 13:00:33, 6] param/loadparm.c:lp_file_list_changed(2998) > lp_file_list_changed() > file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jul 7 12:51:51 2006 > >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=94 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49153 > smb_tid=65535 > smb_pid=1 > smb_uid=100 > smb_mid=1 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_bcc=53 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m > [010] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2 > [020] 00 33 00 72 00 63 00 33 00 00 00 54 00 49 00 47 .3.r.c.3 ...T.I.G > [030] 00 52 00 00 00 .R... >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 73 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x49 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 3 of length 77 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=73 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=65535 > smb_pid=1 > smb_uid=100 > smb_mid=2 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1 (0x1) > smb_bcc=30 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 5C 00 49 00 42 00 52 00 49 00 58 00 32 .\.\.I.B .R.I.X.2 > [010] 00 5C 00 44 00 46 00 53 00 00 00 41 3A 00 .\.D.F.S ...A:. >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtconX (pid 8053) conn 0x0 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 5] smbd/uid.c:change_to_root_user(275) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/07/07 13:00:33, 4] smbd/reply.c:reply_tcon_and_X(668) > Client requested device type [A:] for share [DFS] >[2006/07/07 13:00:33, 5] smbd/service.c:make_connection(1111) > making a connection to 'normal' service dfs >[2006/07/07 13:00:33, 10] smbd/share_access.c:user_ok_token(225) > user_ok_token: share dfs is ok for unix user rajeev >[2006/07/07 13:00:33, 5] lib/username.c:Get_Pwnam_alloc(131) > Finding user rajeev >[2006/07/07 13:00:33, 5] lib/username.c:Get_Pwnam_internals(75) > Trying _Get_Pwnam(), username as lowercase is rajeev >[2006/07/07 13:00:33, 10] lib/util_pw.c:getpwnam_alloc(76) > Got rajeev from pwnam_cache >[2006/07/07 13:00:33, 5] lib/username.c:Get_Pwnam_internals(108) > Get_Pwnam_internals did find user [rajeev]! >[2006/07/07 13:00:33, 10] smbd/service.c:set_conn_connectpath(122) > set_conn_connectpath: service dfs, connectpath = /export/dfsroot >[2006/07/07 13:00:33, 3] smbd/service.c:make_connection_snum(752) > Connect path is '/export/dfsroot' for service [dfs] >[2006/07/07 13:00:33, 4] lib/sharesec.c:get_share_security(130) > get_share_security: using default secdesc for dfs >[2006/07/07 13:00:33, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2006/07/07 13:00:33, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000002, for NT token with 17 entries and first sid S-1-22-1-1518. >[2006/07/07 13:00:33, 3] lib/util_seaccess.c:se_access_check(250) >[2006/07/07 13:00:33, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-22-1-1518 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1081 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1001 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1029 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1121 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1127 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1161 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1241 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1261 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1321 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1325 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1335 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1341 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-3051 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 >[2006/07/07 13:00:33, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (2) granted. >[2006/07/07 13:00:33, 3] smbd/vfs.c:vfs_init_default(219) > Initialising default vfs hooks >[2006/07/07 13:00:33, 5] smbd/connection.c:claim_connection(170) > claiming dfs 0 >[2006/07/07 13:00:33, 10] smbd/share_access.c:user_ok_token(225) > user_ok_token: share dfs is ok for unix user rajeev >[2006/07/07 13:00:33, 10] smbd/share_access.c:is_share_read_only_for_token(267) > is_share_read_only_for_user: share dfs is read-only for unix user rajeev >[2006/07/07 13:00:33, 4] lib/sharesec.c:get_share_security(130) > get_share_security: using default secdesc for dfs >[2006/07/07 13:00:33, 10] lib/util_seaccess.c:se_map_generic(176) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2006/07/07 13:00:33, 10] lib/util_seaccess.c:se_access_check(233) > se_access_check: requested access 0x00000001, for NT token with 17 entries and first sid S-1-22-1-1518. >[2006/07/07 13:00:33, 3] lib/util_seaccess.c:se_access_check(250) >[2006/07/07 13:00:33, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-22-1-1518 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1081 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1001 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1029 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1121 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1127 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1161 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1241 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1261 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1321 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1325 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1335 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-1341 > se_access_check: also S-1-5-21-3229423953-1919848741-1350197535-3051 > se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 >[2006/07/07 13:00:33, 5] lib/util_seaccess.c:se_access_check(308) > se_access_check: access (1) granted. >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(455) > NT user token of user S-1-22-1-1518 > contains 17 SIDs > SID[ 0]: S-1-22-1-1518 > SID[ 1]: S-1-5-21-3229423953-1919848741-1350197535-1081 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-3229423953-1919848741-1350197535-1001 > SID[ 6]: S-1-5-21-3229423953-1919848741-1350197535-1029 > SID[ 7]: S-1-5-21-3229423953-1919848741-1350197535-1121 > SID[ 8]: S-1-5-21-3229423953-1919848741-1350197535-1127 > SID[ 9]: S-1-5-21-3229423953-1919848741-1350197535-1161 > SID[ 10]: S-1-5-21-3229423953-1919848741-1350197535-1241 > SID[ 11]: S-1-5-21-3229423953-1919848741-1350197535-1261 > SID[ 12]: S-1-5-21-3229423953-1919848741-1350197535-1321 > SID[ 13]: S-1-5-21-3229423953-1919848741-1350197535-1325 > SID[ 14]: S-1-5-21-3229423953-1919848741-1350197535-1335 > SID[ 15]: S-1-5-21-3229423953-1919848741-1350197535-1341 > SID[ 16]: S-1-5-21-3229423953-1919848741-1350197535-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/07/07 13:00:33, 5] smbd/uid.c:change_to_user(260) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/07/07 13:00:33, 1] smbd/service.c:make_connection_snum(941) > rajeev-osx (172.18.7.214) connect to service dfs initially as user rajeev (uid=1518, gid=40) (pid 8053) >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(449) > NT user token: (NULL) >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2006/07/07 13:00:33, 5] smbd/uid.c:change_to_root_user(275) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2006/07/07 13:00:33, 2] smbd/reply.c:reply_tcon_and_X(711) > Serving dfs as a Dfs root >[2006/07/07 13:00:33, 3] smbd/reply.c:reply_tcon_and_X(716) > tconX service=DFS >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=54 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 3 (0x3) > smb_bcc=13 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 70 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x46 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 4 of length 74 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=3 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 4 (0x4) > smb_vwv[ 3]= 524 (0x20C) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 05 01 ..... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 3] smbd/sec_ctx.c:set_sec_ctx(241) > setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_nt_user_token(455) > NT user token of user S-1-22-1-1518 > contains 17 SIDs > SID[ 0]: S-1-22-1-1518 > SID[ 1]: S-1-5-21-3229423953-1919848741-1350197535-1081 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-3229423953-1919848741-1350197535-1001 > SID[ 6]: S-1-5-21-3229423953-1919848741-1350197535-1029 > SID[ 7]: S-1-5-21-3229423953-1919848741-1350197535-1121 > SID[ 8]: S-1-5-21-3229423953-1919848741-1350197535-1127 > SID[ 9]: S-1-5-21-3229423953-1919848741-1350197535-1161 > SID[ 10]: S-1-5-21-3229423953-1919848741-1350197535-1241 > SID[ 11]: S-1-5-21-3229423953-1919848741-1350197535-1261 > SID[ 12]: S-1-5-21-3229423953-1919848741-1350197535-1321 > SID[ 13]: S-1-5-21-3229423953-1919848741-1350197535-1325 > SID[ 14]: S-1-5-21-3229423953-1919848741-1350197535-1335 > SID[ 15]: S-1-5-21-3229423953-1919848741-1350197535-1341 > SID[ 16]: S-1-5-21-3229423953-1919848741-1350197535-3051 > SE_PRIV 0x0 0x0 0x0 0x0 >[2006/07/07 13:00:33, 5] auth/auth_util.c:debug_unix_user_token(475) > UNIX token of user 1518 > Primary group is 40 and contains 13 supplementary groups > Group[ 0]: 40 > Group[ 1]: 0 > Group[ 2]: 14 > Group[ 3]: 60 > Group[ 4]: 63 > Group[ 5]: 80 > Group[ 6]: 120 > Group[ 7]: 130 > Group[ 8]: 160 > Group[ 9]: 162 > Group[ 10]: 167 > Group[ 11]: 170 > Group[ 12]: 1025 >[2006/07/07 13:00:33, 5] smbd/uid.c:change_to_user(260) > change_to_user uid=(1518,1518) gid=(0,40) >[2006/07/07 13:00:33, 4] smbd/vfs.c:vfs_ChDir(741) > vfs_ChDir to /export/dfsroot >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2qfsinfo(2162) > call_trans2qfsinfo: level = 261 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(690) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 16584 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(692) > t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=3 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 20 (0x14) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 20 (0x14) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=21 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T > [010] 00 46 00 53 00 .F.S. >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2qfsinfo(2503) > SMBtrans2 info_level = 261 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 88 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x58 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 5 of length 92 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=4 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 4096 (0x1000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=5 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 5C 00 00 00 .\... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBntcreateX (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(501) > reply_ntcreateX: flags = 0x0, access_mask = 0x20000 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "" >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(137) > conversion finished "" -> . >[2006/07/07 13:00:33, 3] smbd/dosmode.c:unix_mode(147) > unix_mode(.) returning 0755 >[2006/07/07 13:00:33, 10] smbd/open.c:open_file_ntcreate(1139) > open_file_ntcreate: fname=., dos_attrs=0x10 access_mask=0x20000 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0755 oplock_request=0 >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: . >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d >[2006/07/07 13:00:33, 10] smbd/open.c:open_file_ntcreate(1296) > open_file_ntcreate: fname=., after mapping access_mask=0x20000 >[2006/07/07 13:00:33, 5] smbd/files.c:file_new(126) > allocated file structure 9860, fnum = 13956 (1 used) >[2006/07/07 13:00:33, 4] smbd/open.c:open_file_ntcreate(1536) > calling open_file with flags=0x0 flags2=0x0 mode=0755 >[2006/07/07 13:00:33, 5] smbd/files.c:file_free(448) > freed files structure 13956 (0 used) >[2006/07/07 13:00:33, 5] smbd/open.c:open_directory(1851) > open_directory: opening directory ., access_mask = 0x20000, share_access = 0x7 create_options = 0x0, create_disposition = 0x1 >[2006/07/07 13:00:33, 5] smbd/files.c:file_new(126) > allocated file structure 9861, fnum = 13957 (1 used) >[2006/07/07 13:00:33, 10] locking/locking.c:unparse_share_modes(654) > unparse_share_modes: del: 0, initial del 0, tok = 0, num: 1 >[2006/07/07 13:00:33, 10] locking/locking.c:print_share_mode_table(473) > print_share_mode_table: share_mode_entry[0]: pid = 8053, share_access = 0x7, private_options = 0x0, access_mask = 0x20000, mid = 0x0, type= 0x0, file_id = 2, uid = 1518, dev = 0xfd00, inode = 655362 >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: . >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d >[2006/07/07 13:00:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(905) > reply_ntcreate_and_X: fnum = 13957, open name = . >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=34048 (0x8500) > smb_vwv[ 3]= 310 (0x136) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=32768 (0x8000) > smb_vwv[ 6]=53262 (0xD00E) > smb_vwv[ 7]=58565 (0xE4C5) > smb_vwv[ 8]=50849 (0xC6A1) > smb_vwv[ 9]=32769 (0x8001) > smb_vwv[10]=59995 (0xEA5B) > smb_vwv[11]=59062 (0xE6B6) > smb_vwv[12]=50849 (0xC6A1) > smb_vwv[13]=32769 (0x8001) > smb_vwv[14]=53262 (0xD00E) > smb_vwv[15]=58565 (0xE4C5) > smb_vwv[16]=50849 (0xC6A1) > smb_vwv[17]=32769 (0x8001) > smb_vwv[18]=53262 (0xD00E) > smb_vwv[19]=58565 (0xE4C5) > smb_vwv[20]=50849 (0xC6A1) > smb_vwv[21]= 4097 (0x1001) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 0 (0x0) > smb_vwv[32]= 0 (0x0) > smb_vwv[33]= 256 (0x100) > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 84 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x54 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 6 of length 88 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=84 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=5 > smt_wct=19 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 2048 (0x800) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=62464 (0xF400) > smb_vwv[ 8]= 1 (0x1) > smb_vwv[ 9]= 2048 (0x800) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=19456 (0x4C00) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 6 (0x6) > smb_bcc=11 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 85 36 00 00 03 00 00 00 ....6... ... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBnttrans (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1959) > call_nt_transact_query_security_desc: file = ., info_wanted = 0x3 >[2006/07/07 13:00:33, 10] smbd/posix_acls.c:get_nt_acl(2730) > get_nt_acl: called for file . >[2006/07/07 13:00:33, 5] smbd/posix_acls.c:get_nt_acl(2767) > get_nt_acl : file ACL absent, directory ACL absent >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(907) > fetch sid from uid cache 0 -> S-1-5-21-3229423953-1919848741-1350197535-1000 >[2006/07/07 13:00:33, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(979) > fetch sid from gid cache 0 -> S-1-5-21-3229423953-1919848741-1350197535-1001 >[2006/07/07 13:00:33, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1986) > call_nt_transact_query_security_desc: sd_size = 76. >[2006/07/07 13:00:33, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 sec_io_desc sd data >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0000 revision : 0001 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint16(675) > 0002 type : 9000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0004 off_owner_sid: 00000014 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0008 off_grp_sid : 00000030 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 000c off_sacl : 00000000 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32(704) > 0010 off_dacl : 00000000 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000014 smb_io_dom_sid owner_sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0014 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0015 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0016 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0017 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0018 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0019 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 001a id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 001b id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 001c sub_auths : 00000015 c07d1951 726e9125 507a611f 000003e8 >[2006/07/07 13:00:33, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_dom_sid grp_sid >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0030 sid_rev_num: 01 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0031 num_auths : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0032 id_auth[0] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0033 id_auth[1] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0034 id_auth[2] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0035 id_auth[3] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0036 id_auth[4] : 00 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint8(615) > 0037 id_auth[5] : 05 >[2006/07/07 13:00:33, 5] rpc_parse/parse_prs.c:prs_uint32s(991) > 0038 sub_auths : 00000015 c07d1951 726e9125 507a611f 000003e9 >[2006/07/07 13:00:33, 9] smbd/nttrans.c:send_nt_replies(229) > nt_rep: params_sent_thistime = 4, data_sent_thistime = 76, useable_space = 16566 >[2006/07/07 13:00:33, 9] smbd/nttrans.c:send_nt_replies(231) > nt_rep: params_to_send = 4, data_to_send = 76, paramsize = 4, datasize = 76 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=154 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=5 > smt_wct=18 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 1024 (0x400) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]=19456 (0x4C00) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=18944 (0x4A00) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=19456 (0x4C00) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=19968 (0x4E00) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_bcc=83 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 4C 00 00 00 01 00 00 90 14 00 00 00 30 ...L.... .......0 > [010] 00 00 00 00 00 00 00 00 00 00 00 01 05 00 00 00 ........ ........ > [020] 00 00 05 15 00 00 00 51 19 7D C0 25 91 6E 72 1F .......Q .}.%.nr. > [030] 61 7A 50 E8 03 00 00 01 05 00 00 00 00 00 05 15 azP..... ........ > [040] 00 00 00 51 19 7D C0 25 91 6E 72 1F 61 7A 50 E9 ...Q.}.% .nr.azP. > [050] 03 00 00 ... >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 41 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x29 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 7 of length 45 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=6 > smt_wct=3 > smb_vwv[ 0]=13957 (0x3685) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBclose (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/reply.c:reply_close(3298) > close directory fnum=13957 >[2006/07/07 13:00:33, 10] locking/locking.c:parse_share_modes(501) > parse_share_modes: delete_on_close: 0, initial_delete_on_close: 0, num_share_modes: 1 >[2006/07/07 13:00:33, 10] locking/locking.c:parse_share_modes(594) > parse_share_modes: share_mode_entry[0]: pid = 8053, share_access = 0x7, private_options = 0x0, access_mask = 0x20000, mid = 0x0, type= 0x0, file_id = 2, uid = 1518, dev = 0xfd00, inode = 655362 >[2006/07/07 13:00:33, 5] smbd/files.c:file_free(448) > freed files structure 13957 (0 used) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=6 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 70 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x46 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 8 of length 74 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=7 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 4 (0x4) > smb_vwv[ 3]= 18 (0x12) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 01 00 ..... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2qfsinfo(2162) > call_trans2qfsinfo: level = 1 >[2006/07/07 13:00:33, 10] lib/sysquotas.c:sys_get_quota(426) > sys_get_quota() uid(1518, 1518) >[2006/07/07 13:00:33, 10] lib/sysquotas_linux.c:sys_get_linux_gen_quota(320) > sys_get_linux_gen_quota: path[/] bdev[/dev/mapper/system-root] SMB_USER_QUOTA_TYPE uid[1518] >[2006/07/07 13:00:33, 10] lib/sysquotas_linux.c:sys_get_linux_v2_quota(186) > sys_get_linux_v2_quota: path[/] bdev[/dev/mapper/system-root] SMB_USER_QUOTA_TYPE uid[1518] >[2006/07/07 13:00:33, 10] lib/sysquotas_linux.c:sys_get_linux_v1_quota(52) > sys_get_linux_v1_quota: path[/] bdev[/dev/mapper/system-root] SMB_USER_QUOTA_TYPE uid[1518] >[2006/07/07 13:00:33, 3] lib/sysquotas.c:sys_get_quota(448) > sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/system-root] qtype[2] id[1518]: Invalid argument >[2006/07/07 13:00:33, 10] lib/sysquotas.c:sys_get_quota(426) > sys_get_quota() uid(1518, 1518) >[2006/07/07 13:00:33, 10] lib/sysquotas_linux.c:sys_get_linux_gen_quota(329) > sys_get_linux_gen_quota: path[/] bdev[/dev/mapper/system-root] SMB_GROUP_QUOTA_TYPE gid[40] >[2006/07/07 13:00:33, 10] lib/sysquotas_linux.c:sys_get_linux_v2_quota(195) > sys_get_linux_v2_quota: path[/] bdev[/dev/mapper/system-root] SMB_GROUP_QUOTA_TYPE gid[40] >[2006/07/07 13:00:33, 10] lib/sysquotas_linux.c:sys_get_linux_v1_quota(61) > sys_get_linux_v1_quota: path[/] bdev[/dev/mapper/system-root] SMB_GROUP_QUOTA_TYPE gid[40] >[2006/07/07 13:00:33, 3] lib/sysquotas.c:sys_get_quota(448) > sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/system-root] qtype[4] id[40]: Invalid argument >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2qfsinfo(2204) > call_trans2qfsinfo : SMB_INFO_ALLOCATION id=fd00, bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=10321208, cUnitAvail=5665676 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(690) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 18, useable_space = 16584 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(692) > t2_rep: params_to_send = 0, data_to_send = 18, paramsize = 0, datasize = 18 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=74 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 18 (0x12) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 18 (0x12) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=19 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 FD 00 00 02 00 00 00 38 7D 9D 00 8C 73 56 ........ .8}...sV > [010] 00 00 02 ... >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2qfsinfo(2503) > SMBtrans2 info_level = 1 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 126 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x7e >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 9 of length 130 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=126 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=8 > smt_wct=15 > smb_vwv[ 0]= 58 (0x3A) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 58 (0x3A) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=61 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 2E 00 6D 00 65 00 74 00 61 00 64 00 61 00 74 ...m.e.t .a.d.a.t > [020] 00 61 00 5F 00 6E 00 65 00 76 00 65 00 72 00 5F .a._.n.e .v.e.r._ > [030] 00 69 00 6E 00 64 00 65 00 78 00 00 00 .i.n.d.e .x... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file ".metadata_never_index" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [.METADATA_NEVER_INDEX] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = .metadata_never_index, dirpath = , start = .metadata_never_index >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .metadata_never_index ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .metadata_never_index (len 21) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .metadata_never_index ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .metadata_never_index (len 21) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .metadata_never_index ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .metadata_never_index (len 21) ? >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(335) > New file .metadata_never_index >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = .metadata_never_index >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = .metadata_never_index, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 771496934 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=0) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 1671277131 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset -1 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1839) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=15 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=8 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 136 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x88 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 10 of length 140 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=136 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=9 > smt_wct=15 > smb_vwv[ 0]= 68 (0x44) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 68 (0x44) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=71 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 2E 00 6D 00 65 00 74 00 61 00 64 00 61 00 74 ...m.e.t .a.d.a.t > [020] 00 61 00 5F 00 69 00 6E 00 64 00 65 00 78 00 5F .a._.i.n .d.e.x._ > [030] 00 68 00 6F 00 6D 00 65 00 73 00 5F 00 6F 00 6E .h.o.m.e .s._.o.n > [040] 00 6C 00 79 00 00 00 .l.y... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file ".metadata_index_homes_only" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [.METADATA_INDEX_HOMES_ONLY] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = .metadata_index_homes_only, dirpath = , start = .metadata_index_homes_only >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .metadata_index_homes_only ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .metadata_index_homes_only (len 26) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .metadata_index_homes_only ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .metadata_index_homes_only (len 26) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .metadata_index_homes_only ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .metadata_index_homes_only (len 26) ? >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(335) > New file .metadata_index_homes_only >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = .metadata_index_homes_only >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = .metadata_index_homes_only, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 771496934 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=0) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 1671277131 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset -1 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1839) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=15 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=9 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 114 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x72 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 11 of length 118 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=10 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=49 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 2E 00 53 00 70 00 6F 00 74 00 6C 00 69 00 67 ...S.p.o .t.l.i.g > [020] 00 68 00 74 00 2D 00 56 00 31 00 30 00 30 00 00 .h.t.-.V .1.0.0.. > [030] 00 . >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file ".Spotlight-V100" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [.SPOTLIGHT-V100] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = .Spotlight-V100, dirpath = , start = .Spotlight-V100 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .Spotlight-V100 ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .Spotlight-V100 (len 15) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .Spotlight-V100 ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .Spotlight-V100 (len 15) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .Spotlight-V100 ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .Spotlight-V100 (len 15) ? >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(335) > New file .Spotlight-V100 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = .Spotlight-V100 >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = .Spotlight-V100, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 771496934 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=0) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 1671277131 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset -1 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1839) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=15 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=10 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 114 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x72 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 12 of length 118 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=114 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=11 > smt_wct=15 > smb_vwv[ 0]= 46 (0x2E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 46 (0x2E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=49 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 2E 00 53 00 70 00 6F 00 74 00 6C 00 69 00 67 ...S.p.o .t.l.i.g > [020] 00 68 00 74 00 2D 00 56 00 31 00 30 00 30 00 00 .h.t.-.V .1.0.0.. > [030] 00 . >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file ".Spotlight-V100" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [.SPOTLIGHT-V100] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = .Spotlight-V100, dirpath = , start = .Spotlight-V100 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .Spotlight-V100 ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .Spotlight-V100 (len 15) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .Spotlight-V100 ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .Spotlight-V100 (len 15) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .Spotlight-V100 ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .Spotlight-V100 (len 15) ? >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(335) > New file .Spotlight-V100 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = .Spotlight-V100 >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = .Spotlight-V100, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 771496934 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=0) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 1671277131 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset -1 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1839) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=15 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=11 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 102 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x66 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 13 of length 106 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=102 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=12 > smt_wct=15 > smb_vwv[ 0]= 34 (0x22) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 34 (0x22) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=37 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 2E 00 44 00 53 00 5F 00 53 00 74 00 6F 00 72 ...D.S._ .S.t.o.r > [020] 00 65 00 00 00 .e... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file ".DS_Store" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [.DS_STORE] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = .DS_Store, dirpath = , start = .DS_Store >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .DS_Store ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .DS_Store ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .DS_Store ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(335) > New file .DS_Store >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = .DS_Store >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = .DS_Store, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 771496934 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=0) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 1671277131 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset -1 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1839) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=15 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=12 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 86 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x56 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 14 of length 90 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=86 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=13 > smt_wct=15 > smb_vwv[ 0]= 18 (0x12) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 18 (0x12) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=21 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 20 00 06 00 04 01 00 00 00 00 5C ..... .. .......\ > [010] 00 2A 00 00 00 .*... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 32, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "*" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [*] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = *, dirpath = , start = * >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled * ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled * ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(335) > New file * >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = * >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = *, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: ./. >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1192) > get_lanman2_dir_entry found ./. fname=. >[2006/07/07 13:00:33, 10] smbd/trans2.c:get_lanman2_dir_entry(1335) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: ./.. >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1192) > get_lanman2_dir_entry found ./.. fname=.. >[2006/07/07 13:00:33, 10] smbd/trans2.c:get_lanman2_dir_entry(1335) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 771496934 >[2006/07/07 13:00:33, 5] smbd/msdfs.c:is_msdfs_link(282) > is_msdfs_link: ./annotation -> msdfs:netmama.tigr.org\annotation >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1160) > get_lanman2_dir_entry: Masquerading msdfs link ./annotation as a directory >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: ./annotation >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d[sparse] >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1192) > get_lanman2_dir_entry found ./annotation fname=annotation >[2006/07/07 13:00:33, 10] smbd/trans2.c:get_lanman2_dir_entry(1335) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=1) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset 1671277131 >[2006/07/07 13:00:33, 5] smbd/msdfs.c:is_msdfs_link(282) > is_msdfs_link: ./IT -> msdfs:netmama.tigr.org\BioInformatics\IT >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1160) > get_lanman2_dir_entry: Masquerading msdfs link ./IT as a directory >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: ./IT >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d[sparse] >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1192) > get_lanman2_dir_entry found ./IT fname=IT >[2006/07/07 13:00:33, 10] smbd/trans2.c:get_lanman2_dir_entry(1335) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afb8400 now at offset -1 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(690) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 412, useable_space = 16582 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(692) > t2_rep: params_to_send = 10, data_to_send = 412, paramsize = 10, datasize = 412 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=480 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=13 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 412 (0x19C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 412 (0x19C) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=425 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 FD FF 04 00 01 00 00 00 38 01 00 00 60 00 00 ........ .8...`.. > [010] 00 00 00 00 00 80 0E D0 C5 E4 A1 C6 01 80 CE DE ........ ........ > [020] DB E6 A1 C6 01 80 0E D0 C5 E4 A1 C6 01 80 0E D0 ........ ........ > [030] C5 E4 A1 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 10 00 00 00 02 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 2E 00 64 00 00 ........ .....d.. > [070] 00 00 00 00 00 80 CC 3C 03 99 99 C6 01 80 8A F8 .......< ........ > [080] AD E4 A1 C6 01 80 CC 3C 03 99 99 C6 01 80 CC 3C .......< .......< > [090] 03 99 99 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0A0] 00 00 00 00 00 10 00 00 00 04 00 00 00 00 00 00 ........ ........ > [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0C0] 00 00 00 00 00 00 00 00 00 00 00 2E 00 2E 00 00 ........ ........ > [0D0] 00 74 00 00 00 00 00 00 00 80 B8 54 D2 BA 9A C6 .t...... ...T.... > [0E0] 01 80 CE DE DB E6 A1 C6 01 80 B8 54 D2 BA 9A C6 ........ ...T.... > [0F0] 01 80 B8 54 D2 BA 9A C6 01 00 00 00 00 00 00 00 ...T.... ........ > [100] 00 00 00 00 00 00 00 00 00 10 02 00 00 14 00 00 ........ ........ > [110] 00 00 00 00 00 10 00 41 00 50 00 50 00 59 00 56 .......A .P.P.Y.V > [120] 00 4F 00 7E 00 59 00 00 00 00 00 00 00 00 00 61 .O.~.Y.. .......a > [130] 00 6E 00 6E 00 6F 00 74 00 61 00 74 00 69 00 6F .n.n.o.t .a.t.i.o > [140] 00 6E 00 00 00 64 00 00 00 00 00 00 00 00 BB B7 .n...d.. ........ > [150] 5B BA 9A C6 01 80 CE DE DB E6 A1 C6 01 00 BB B7 [....... ........ > [160] 5B BA 9A C6 01 00 BB B7 5B BA 9A C6 01 00 00 00 [....... [....... > [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 10 02 00 ........ ........ > [180] 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [1A0] 00 00 00 49 00 54 00 00 00 ...I.T.. . >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1859) > SMBtrans2 mask=* directory=./ dirtype=22 numentries=4 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x68 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 15 of length 108 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=104 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=14 > smt_wct=15 > smb_vwv[ 0]= 36 (0x24) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 36 (0x24) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=39 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 61 00 6E 00 6E 00 6F 00 74 00 61 00 74 00 69 .a.n.n.o .t.a.t.i > [020] 00 6F 00 6E 00 00 00 .o.n... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "annotation" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [ANNOTATION] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = annotation, dirpath = , start = annotation >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:33, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbd260:sizeb) ANNOTATION -> annotation >[2006/07/07 13:00:33, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbd260:sizeb) ANNOTATION -> annotation >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(400) > conversion finished annotation -> annotation >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = annotation >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = annotation, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af366e0 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af366e0 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af366e0 now at offset 771496934 >[2006/07/07 13:00:33, 5] smbd/msdfs.c:is_msdfs_link(282) > is_msdfs_link: ./annotation -> msdfs:netmama.tigr.org\annotation >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1160) > get_lanman2_dir_entry: Masquerading msdfs link ./annotation as a directory >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: ./annotation >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d[sparse] >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1192) > get_lanman2_dir_entry found ./annotation fname=annotation >[2006/07/07 13:00:33, 10] smbd/trans2.c:get_lanman2_dir_entry(1335) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=1) >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(690) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 16582 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(692) > t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=184 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=14 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 116 (0x74) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 116 (0x74) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=129 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 74 00 00 ........ .....t.. > [010] 00 00 00 00 00 80 B8 54 D2 BA 9A C6 01 80 CE DE .......T ........ > [020] DB E6 A1 C6 01 80 B8 54 D2 BA 9A C6 01 80 B8 54 .......T .......T > [030] D2 BA 9A C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 10 02 00 00 14 00 00 00 00 00 00 ........ ........ > [050] 00 10 00 41 00 50 00 50 00 59 00 56 00 4F 00 7E ...A.P.P .Y.V.O.~ > [060] 00 59 00 00 00 00 00 00 00 00 00 61 00 6E 00 6E .Y...... ...a.n.n > [070] 00 6F 00 74 00 61 00 74 00 69 00 6F 00 6E 00 00 .o.t.a.t .i.o.n.. > [080] 00 . >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1859) > SMBtrans2 mask=annotation directory=./ dirtype=22 numentries=1 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=1) >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 88 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x58 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 16 of length 92 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=88 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=15 > smt_wct=15 > smb_vwv[ 0]= 20 (0x14) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 20 (0x14) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=23 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 49 00 54 00 00 00 .I.T... >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "IT" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [IT] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = IT, dirpath = , start = IT >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled IT ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component IT (len 2) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled IT ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component IT (len 2) ? >[2006/07/07 13:00:33, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbdc10:size3) IT -> IT >[2006/07/07 13:00:33, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbdc10:size3) IT -> IT >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(400) > conversion finished IT -> IT >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = IT >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = IT, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af6d5f0 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af6d5f0 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af6d5f0 now at offset 771496934 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=0) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af6d5f0 now at offset 1671277131 >[2006/07/07 13:00:33, 5] smbd/msdfs.c:is_msdfs_link(282) > is_msdfs_link: ./IT -> msdfs:netmama.tigr.org\BioInformatics\IT >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1160) > get_lanman2_dir_entry: Masquerading msdfs link ./IT as a directory >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: ./IT >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:33, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d[sparse] >[2006/07/07 13:00:33, 5] smbd/trans2.c:get_lanman2_dir_entry(1192) > get_lanman2_dir_entry found ./IT fname=IT >[2006/07/07 13:00:33, 10] smbd/trans2.c:get_lanman2_dir_entry(1335) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(690) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 100, useable_space = 16582 >[2006/07/07 13:00:33, 9] smbd/trans2.c:send_trans2_replies(692) > t2_rep: params_to_send = 10, data_to_send = 100, paramsize = 10, datasize = 100 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=168 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=15 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 100 (0x64) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 100 (0x64) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=113 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 64 00 00 ........ .....d.. > [010] 00 00 00 00 00 00 BB B7 5B BA 9A C6 01 80 CE DE ........ [....... > [020] DB E6 A1 C6 01 00 BB B7 5B BA 9A C6 01 00 BB B7 ........ [....... > [030] 5B BA 9A C6 01 00 00 00 00 00 00 00 00 00 00 00 [....... ........ > [040] 00 00 00 00 00 10 02 00 00 04 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 49 00 54 00 00 ........ ...I.T.. > [070] 00 . >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1859) > SMBtrans2 mask=IT directory=./ dirtype=22 numentries=1 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 98 >[2006/07/07 13:00:33, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x62 >[2006/07/07 13:00:33, 3] smbd/process.c:process_smb(1110) > Transaction 17 of length 102 >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=98 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=16 > smt_wct=15 > smb_vwv[ 0]= 30 (0x1E) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 30 (0x1E) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=33 >[2006/07/07 13:00:33, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 2E 00 68 00 69 00 64 00 64 00 65 00 6E 00 00 ...h.i.d .d.e.n.. > [020] 00 . >[2006/07/07 13:00:33, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:33, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:33, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file ".hidden" >[2006/07/07 13:00:33, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [.HIDDEN] >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = .hidden, dirpath = , start = .hidden >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .hidden ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .hidden (len 7) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .hidden ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .hidden (len 7) ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .hidden ? >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .hidden (len 7) ? >[2006/07/07 13:00:33, 5] smbd/filename.c:unix_convert(335) > New file .hidden >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = .hidden >[2006/07/07 13:00:33, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:33, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:33, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = .hidden, attr = 22 >[2006/07/07 13:00:33, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afbe3d0 now at offset 0 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afbe3d0 now at offset 2147483648 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afbe3d0 now at offset 771496934 >[2006/07/07 13:00:33, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=0) >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afbe3d0 now at offset 1671277131 >[2006/07/07 13:00:33, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552afbe3d0 now at offset -1 >[2006/07/07 13:00:33, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:33, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:33, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1839) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:33, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=15 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=16 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:33, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:35, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 108 >[2006/07/07 13:00:35, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x6c >[2006/07/07 13:00:35, 3] smbd/process.c:process_smb(1110) > Transaction 18 of length 112 >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=17 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2006/07/07 13:00:35, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 20 00 06 00 04 01 00 00 00 00 5C ..... .. .......\ > [010] 00 61 00 6E 00 6E 00 6F 00 74 00 61 00 74 00 69 .a.n.n.o .t.a.t.i > [020] 00 6F 00 6E 00 5C 00 2A 00 00 00 .o.n.\.* ... >[2006/07/07 13:00:35, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:35, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:35, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 32, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "annotation/*" >[2006/07/07 13:00:35, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [ANNOTATION/*] >[2006/07/07 13:00:35, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [ANNOTATION] -> [annotation] >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = annotation/*, dirpath = , start = annotation/* >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation/* ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation/* (len 10) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled * ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(335) > New file * >[2006/07/07 13:00:35, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=annotation, mask = * >[2006/07/07 13:00:35, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=annotation >[2006/07/07 13:00:35, 5] smbd/dir.c:OpenDir(1044) > OpenDir: Can't open annotation. No such file or directory >[2006/07/07 13:00:35, 3] smbd/error.c:unix_error_packet(90) > unix_error_packet: error string = No such file or directory >[2006/07/07 13:00:35, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1767) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=17 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:35, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:35, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2006/07/07 13:00:35, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x68 >[2006/07/07 13:00:35, 3] smbd/process.c:process_smb(1110) > Transaction 19 of length 108 >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=104 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=18 > smt_wct=15 > smb_vwv[ 0]= 36 (0x24) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 36 (0x24) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=39 >[2006/07/07 13:00:35, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 61 00 6E 00 6E 00 6F 00 74 00 61 00 74 00 69 .a.n.n.o .t.a.t.i > [020] 00 6F 00 6E 00 00 00 .o.n... >[2006/07/07 13:00:35, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:35, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:35, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "annotation" >[2006/07/07 13:00:35, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [ANNOTATION] >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = annotation, dirpath = , start = annotation >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:35, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbc970:sizeb) ANNOTATION -> annotation >[2006/07/07 13:00:35, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbc970:sizeb) ANNOTATION -> annotation >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(400) > conversion finished annotation -> annotation >[2006/07/07 13:00:35, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=./, mask = annotation >[2006/07/07 13:00:35, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=./ >[2006/07/07 13:00:35, 3] smbd/dir.c:dptr_create(511) > creating new dirptr 256 for path ./, expect_close = 1 >[2006/07/07 13:00:35, 4] smbd/trans2.c:call_trans2findfirst(1770) > dptr_num is 256, wcard = annotation, attr = 22 >[2006/07/07 13:00:35, 8] smbd/trans2.c:call_trans2findfirst(1775) > dirpath=<./> dontdescend=<> >[2006/07/07 13:00:35, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 0 >[2006/07/07 13:00:35, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 2147483648 >[2006/07/07 13:00:35, 8] smbd/trans2.c:get_lanman2_dir_entry(1108) > get_lanman2_dir_entry:readdir on dirptr 0x552af7eca0 now at offset 771496934 >[2006/07/07 13:00:35, 5] smbd/msdfs.c:is_msdfs_link(282) > is_msdfs_link: ./annotation -> msdfs:netmama.tigr.org\annotation >[2006/07/07 13:00:35, 5] smbd/trans2.c:get_lanman2_dir_entry(1160) > get_lanman2_dir_entry: Masquerading msdfs link ./annotation as a directory >[2006/07/07 13:00:35, 8] smbd/dosmode.c:dos_mode(326) > dos_mode: ./annotation >[2006/07/07 13:00:35, 8] smbd/dosmode.c:dos_mode_from_sbuf(193) > dos_mode_from_sbuf returning d >[2006/07/07 13:00:35, 8] smbd/dosmode.c:dos_mode(364) > dos_mode returning d[sparse] >[2006/07/07 13:00:35, 5] smbd/trans2.c:get_lanman2_dir_entry(1192) > get_lanman2_dir_entry found ./annotation fname=annotation >[2006/07/07 13:00:35, 10] smbd/trans2.c:get_lanman2_dir_entry(1335) > get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=1) >[2006/07/07 13:00:35, 5] smbd/trans2.c:call_trans2findfirst(1823) > call_trans2findfirst - (2) closing dptr_num 256 >[2006/07/07 13:00:35, 4] smbd/dir.c:dptr_close_internal(238) > closing dptr key 256 >[2006/07/07 13:00:35, 9] smbd/trans2.c:send_trans2_replies(690) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 16582 >[2006/07/07 13:00:35, 9] smbd/trans2.c:send_trans2_replies(692) > t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116 >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=184 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=18 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 116 (0x74) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 116 (0x74) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=129 >[2006/07/07 13:00:35, 10] lib/util.c:dump_data(2215) > [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 74 00 00 ........ .....t.. > [010] 00 00 00 00 00 80 B8 54 D2 BA 9A C6 01 80 FB 0F .......T ........ > [020] DD E6 A1 C6 01 80 B8 54 D2 BA 9A C6 01 80 B8 54 .......T .......T > [030] D2 BA 9A C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 00 00 10 02 00 00 14 00 00 00 00 00 00 ........ ........ > [050] 00 10 00 41 00 50 00 50 00 59 00 56 00 4F 00 7E ...A.P.P .Y.V.O.~ > [060] 00 59 00 00 00 00 00 00 00 00 00 61 00 6E 00 6E .Y...... ...a.n.n > [070] 00 6F 00 74 00 61 00 74 00 69 00 6F 00 6E 00 00 .o.t.a.t .i.o.n.. > [080] 00 . >[2006/07/07 13:00:35, 4] smbd/trans2.c:call_trans2findfirst(1859) > SMBtrans2 mask=annotation directory=./ dirtype=22 numentries=1 >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:name_map(617) > name_map: annotation -> 5CB391F2 -> APPYVO~Y (cache=1) >[2006/07/07 13:00:35, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:35, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 108 >[2006/07/07 13:00:35, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x6c >[2006/07/07 13:00:35, 3] smbd/process.c:process_smb(1110) > Transaction 20 of length 112 >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=19 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2006/07/07 13:00:35, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 22 00 06 00 04 01 00 00 00 00 5C .....".. .......\ > [010] 00 61 00 6E 00 6E 00 6F 00 74 00 61 00 74 00 69 .a.n.n.o .t.a.t.i > [020] 00 6F 00 6E 00 5C 00 2A 00 00 00 .o.n.\.* ... >[2006/07/07 13:00:35, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:35, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:35, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 34, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "annotation/*" >[2006/07/07 13:00:35, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [ANNOTATION/*] >[2006/07/07 13:00:35, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [ANNOTATION] -> [annotation] >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = annotation/*, dirpath = , start = annotation/* >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation/* ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation/* (len 10) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled * ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component * (len 1) ? >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(335) > New file * >[2006/07/07 13:00:35, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=annotation, mask = * >[2006/07/07 13:00:35, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=annotation >[2006/07/07 13:00:35, 5] smbd/dir.c:OpenDir(1044) > OpenDir: Can't open annotation. No such file or directory >[2006/07/07 13:00:35, 3] smbd/error.c:unix_error_packet(90) > unix_error_packet: error string = No such file or directory >[2006/07/07 13:00:35, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1767) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=19 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:35, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:35, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 37 >[2006/07/07 13:00:35, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x25 >[2006/07/07 13:00:35, 3] smbd/process.c:process_smb(1110) > Transaction 21 of length 41 >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=37 > smb_com=0x34 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=20 > smt_wct=1 > smb_vwv[ 0]= 0 (0x0) > smb_bcc=0 >[2006/07/07 13:00:35, 3] smbd/process.c:switch_message(914) > switch message SMBfindclose (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:35, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:35, 3] smbd/trans2.c:reply_findclose(5000) > reply_findclose, dptr_num = 0 >[2006/07/07 13:00:35, 0] smbd/dir.c:dptr_close(289) > Invalid key 0 given to dptr_close >[2006/07/07 13:00:35, 3] smbd/trans2.c:reply_findclose(5006) > SMBfindclose dptr_num = 0 >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x34 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=20 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:35, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:35, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2006/07/07 13:00:35, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x7c >[2006/07/07 13:00:35, 3] smbd/process.c:process_smb(1110) > Transaction 22 of length 128 >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=124 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=21 > smt_wct=15 > smb_vwv[ 0]= 56 (0x38) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 56 (0x38) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=59 >[2006/07/07 13:00:35, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 61 00 6E 00 6E 00 6F 00 74 00 61 00 74 00 69 .a.n.n.o .t.a.t.i > [020] 00 6F 00 6E 00 5C 00 2E 00 44 00 53 00 5F 00 53 .o.n.\.. .D.S._.S > [030] 00 74 00 6F 00 72 00 65 00 00 00 .t.o.r.e ... >[2006/07/07 13:00:35, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:35, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:35, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "annotation/.DS_Store" >[2006/07/07 13:00:35, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [ANNOTATION/.DS_STORE] >[2006/07/07 13:00:35, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [ANNOTATION] >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = annotation/.DS_Store, dirpath = , start = annotation/.DS_Store >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation/.DS_Store ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation/.DS_Store (len 10) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:35, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbd400:sizeb) ANNOTATION -> annotation >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .DS_Store ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:35, 5] smbd/dir.c:OpenDir(1044) > OpenDir: Can't open annotation. No such file or directory >[2006/07/07 13:00:35, 3] smbd/filename.c:scan_directory(474) > scan dir didn't open dir [annotation] >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .DS_Store ? >[2006/07/07 13:00:35, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:35, 5] smbd/filename.c:unix_convert(335) > New file .DS_Store >[2006/07/07 13:00:35, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=annotation, mask = .DS_Store >[2006/07/07 13:00:35, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=annotation >[2006/07/07 13:00:35, 5] smbd/dir.c:OpenDir(1044) > OpenDir: Can't open annotation. No such file or directory >[2006/07/07 13:00:35, 3] smbd/error.c:unix_error_packet(90) > unix_error_packet: error string = No such file or directory >[2006/07/07 13:00:35, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1767) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:35, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=21 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:35, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:36, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2006/07/07 13:00:36, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x7c >[2006/07/07 13:00:36, 3] smbd/process.c:process_smb(1110) > Transaction 23 of length 128 >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(488) > size=124 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=22 > smt_wct=15 > smb_vwv[ 0]= 56 (0x38) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16644 (0x4104) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 56 (0x38) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=59 >[2006/07/07 13:00:36, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 16 00 04 00 07 00 04 01 00 00 00 00 5C ........ .......\ > [010] 00 61 00 6E 00 6E 00 6F 00 74 00 61 00 74 00 69 .a.n.n.o .t.a.t.i > [020] 00 6F 00 6E 00 5C 00 2E 00 44 00 53 00 5F 00 53 .o.n.\.. .D.S._.S > [030] 00 74 00 6F 00 72 00 65 00 00 00 .t.o.r.e ... >[2006/07/07 13:00:36, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:36, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:36, 3] smbd/trans2.c:call_trans2findfirst(1657) > call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16644 >[2006/07/07 13:00:36, 5] smbd/filename.c:unix_convert(108) > unix_convert called on file "annotation/.DS_Store" >[2006/07/07 13:00:36, 10] smbd/statcache.c:stat_cache_lookup(215) > stat_cache_lookup: lookup failed for name [ANNOTATION/.DS_STORE] >[2006/07/07 13:00:36, 10] smbd/statcache.c:stat_cache_lookup(248) > stat_cache_lookup: lookup succeeded for name [ANNOTATION] -> [annotation] >[2006/07/07 13:00:36, 5] smbd/filename.c:unix_convert(185) > unix_convert begin: name = annotation/.DS_Store, dirpath = , start = annotation/.DS_Store >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation/.DS_Store ? >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation/.DS_Store (len 10) ? >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled annotation ? >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component annotation (len 10) ? >[2006/07/07 13:00:36, 5] smbd/statcache.c:stat_cache_add(140) > stat_cache_add: Added entry (552afbc970:sizeb) ANNOTATION -> annotation >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .DS_Store ? >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:36, 5] smbd/dir.c:OpenDir(1044) > OpenDir: Can't open annotation. No such file or directory >[2006/07/07 13:00:36, 3] smbd/filename.c:scan_directory(474) > scan dir didn't open dir [annotation] >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled(276) > is_mangled .DS_Store ? >[2006/07/07 13:00:36, 10] smbd/mangle_hash2.c:is_mangled_component(215) > is_mangled_component .DS_Store (len 9) ? >[2006/07/07 13:00:36, 5] smbd/filename.c:unix_convert(335) > New file .DS_Store >[2006/07/07 13:00:36, 5] smbd/trans2.c:call_trans2findfirst(1714) > dir=annotation, mask = .DS_Store >[2006/07/07 13:00:36, 5] smbd/dir.c:dptr_create(391) > dptr_create dir=annotation >[2006/07/07 13:00:36, 5] smbd/dir.c:OpenDir(1044) > OpenDir: Can't open annotation. No such file or directory >[2006/07/07 13:00:36, 3] smbd/error.c:unix_error_packet(90) > unix_error_packet: error string = No such file or directory >[2006/07/07 13:00:36, 3] smbd/error.c:error_packet(146) > error packet at smbd/trans2.c(1767) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(488) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=22 > smt_wct=0 > smb_bcc=0 >[2006/07/07 13:00:36, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:36, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 70 >[2006/07/07 13:00:36, 6] smbd/process.c:process_smb(1109) > got message type 0x0 of len 0x46 >[2006/07/07 13:00:36, 3] smbd/process.c:process_smb(1110) > Transaction 24 of length 74 >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(488) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=49153 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=23 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 4 (0x4) > smb_vwv[ 3]= 18 (0x12) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2006/07/07 13:00:36, 10] lib/util.c:dump_data(2215) > [000] 00 00 00 01 00 ..... >[2006/07/07 13:00:36, 3] smbd/process.c:switch_message(914) > switch message SMBtrans2 (pid 8053) conn 0x552afc6470 >[2006/07/07 13:00:36, 4] smbd/uid.c:change_to_user(176) > change_to_user: Skipping user change - already user >[2006/07/07 13:00:36, 3] smbd/trans2.c:call_trans2qfsinfo(2162) > call_trans2qfsinfo: level = 1 >[2006/07/07 13:00:36, 10] lib/sysquotas.c:sys_get_quota(426) > sys_get_quota() uid(1518, 1518) >[2006/07/07 13:00:36, 10] lib/sysquotas_linux.c:sys_get_linux_gen_quota(320) > sys_get_linux_gen_quota: path[/] bdev[/dev/mapper/system-root] SMB_USER_QUOTA_TYPE uid[1518] >[2006/07/07 13:00:36, 10] lib/sysquotas_linux.c:sys_get_linux_v2_quota(186) > sys_get_linux_v2_quota: path[/] bdev[/dev/mapper/system-root] SMB_USER_QUOTA_TYPE uid[1518] >[2006/07/07 13:00:36, 10] lib/sysquotas_linux.c:sys_get_linux_v1_quota(52) > sys_get_linux_v1_quota: path[/] bdev[/dev/mapper/system-root] SMB_USER_QUOTA_TYPE uid[1518] >[2006/07/07 13:00:36, 3] lib/sysquotas.c:sys_get_quota(448) > sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/system-root] qtype[2] id[1518]: Invalid argument >[2006/07/07 13:00:36, 10] lib/sysquotas.c:sys_get_quota(426) > sys_get_quota() uid(1518, 1518) >[2006/07/07 13:00:36, 10] lib/sysquotas_linux.c:sys_get_linux_gen_quota(329) > sys_get_linux_gen_quota: path[/] bdev[/dev/mapper/system-root] SMB_GROUP_QUOTA_TYPE gid[40] >[2006/07/07 13:00:36, 10] lib/sysquotas_linux.c:sys_get_linux_v2_quota(195) > sys_get_linux_v2_quota: path[/] bdev[/dev/mapper/system-root] SMB_GROUP_QUOTA_TYPE gid[40] >[2006/07/07 13:00:36, 10] lib/sysquotas_linux.c:sys_get_linux_v1_quota(61) > sys_get_linux_v1_quota: path[/] bdev[/dev/mapper/system-root] SMB_GROUP_QUOTA_TYPE gid[40] >[2006/07/07 13:00:36, 3] lib/sysquotas.c:sys_get_quota(448) > sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/system-root] qtype[4] id[40]: Invalid argument >[2006/07/07 13:00:36, 5] smbd/trans2.c:call_trans2qfsinfo(2204) > call_trans2qfsinfo : SMB_INFO_ALLOCATION id=fd00, bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=10321208, cUnitAvail=5665676 >[2006/07/07 13:00:36, 9] smbd/trans2.c:send_trans2_replies(690) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 18, useable_space = 16584 >[2006/07/07 13:00:36, 9] smbd/trans2.c:send_trans2_replies(692) > t2_rep: params_to_send = 0, data_to_send = 18, paramsize = 0, datasize = 18 >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(478) >[2006/07/07 13:00:36, 5] lib/util.c:show_msg(488) > size=74 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49217 > smb_tid=1 > smb_pid=1 > smb_uid=100 > smb_mid=23 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 18 (0x12) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 18 (0x12) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=19 >[2006/07/07 13:00:36, 10] lib/util.c:dump_data(2215) > [000] 00 00 FD 00 00 02 00 00 00 38 7D 9D 00 8C 73 56 ........ .8}...sV > [010] 00 00 02 ... >[2006/07/07 13:00:36, 4] smbd/trans2.c:call_trans2qfsinfo(2503) > SMBtrans2 info_level = 1 >[2006/07/07 13:00:36, 10] smbd/process.c:setup_select_timeout(1284) > change_notify_timeout: -1 >[2006/07/07 13:00:39, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. >[2006/07/07 13:00:39, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) > announce_myself_to_domain_master_browser: t (1152291629) - last(1152291575) < 900 >[2006/07/07 13:00:39, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. >[2006/07/07 13:00:39, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(171) > find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 3853
:
1979
|
1980
|
1981
|
2022
| 2023