[2008/03/06 01:44:02, 10] smbd/notify_inotify.c:inotify_dispatch(158) inotify_dispatch called with mask=4, name=[test.aspx] [2008/03/06 01:44:02, 10] smbd/notify_inotify.c:inotify_dispatch(190) inotify_dispatch: ne.action = 3, ne.path = test.aspx [2008/03/06 01:44:02, 10] smbd/notify_inotify.c:filter_match(108) filter_match: e->mask=4, w->mask=210003c4, w->filter=15b [2008/03/06 01:44:02, 10] smbd/notify_internal.c:sys_notify_callback(287) sys_notify_callback called with action=3, for test.aspx [2008/03/06 01:44:02, 10] smbd/notify.c:notify_callback(214) notify_callback called for web [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0000 offset: 00000000 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0004 action: 00000003 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0008 namelen: 00000012 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_unistr(1255) 000c name: t.e.s.t...a.s.p.x... [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(234) nt_rep: params_sent_thistime = 30, data_sent_thistime = 0, useable_space = 130994 [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(236) nt_rep: params_to_send = 30, data_to_send = 0, paramsize = 30, datasize = 0 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=30208 smt_wct=18 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 7680 (0x1E00) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 7680 (0x1E00) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=18944 (0x4A00) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_bcc=33 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 00 00 03 00 00 00 12 00 00 00 74 ........ .......t [010] 00 65 00 73 00 74 00 2E 00 61 00 73 00 70 00 78 .e.s.t.. .a.s.p.x [020] 00 . [2008/03/06 01:44:02, 10] smbd/notify_inotify.c:filter_match(108) filter_match: e->mask=4, w->mask=210003c4, w->filter=15b [2008/03/06 01:44:02, 10] smbd/notify_internal.c:sys_notify_callback(287) sys_notify_callback called with action=3, for test.aspx [2008/03/06 01:44:02, 10] smbd/notify.c:notify_callback(214) notify_callback called for web [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0000 offset: 00000000 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0004 action: 00000003 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0008 namelen: 00000012 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_unistr(1255) 000c name: t.e.s.t...a.s.p.x... [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(234) nt_rep: params_sent_thistime = 30, data_sent_thistime = 0, useable_space = 130994 [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(236) nt_rep: params_to_send = 30, data_to_send = 0, paramsize = 30, datasize = 0 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=30467 smt_wct=18 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 7680 (0x1E00) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 7680 (0x1E00) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=18944 (0x4A00) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_bcc=33 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 00 00 03 00 00 00 12 00 00 00 74 ........ .......t [010] 00 65 00 73 00 74 00 2E 00 61 00 73 00 70 00 78 .e.s.t.. .a.s.p.x [020] 00 . [2008/03/06 01:44:02, 10] smbd/notify_inotify.c:filter_match(108) filter_match: e->mask=4, w->mask=210003c0, w->filter=2 [2008/03/06 01:44:02, 10] smbd/notify_inotify.c:inotify_dispatch(158) inotify_dispatch called with mask=4, name=[test.aspx] [2008/03/06 01:44:02, 10] smbd/notify_inotify.c:inotify_dispatch(190) inotify_dispatch: ne.action = 3, ne.path = test.aspx [2008/03/06 01:44:02, 10] smbd/notify_inotify.c:filter_match(108) filter_match: e->mask=4, w->mask=210003c4, w->filter=fdb [2008/03/06 01:44:02, 10] smbd/notify_internal.c:sys_notify_callback(287) sys_notify_callback called with action=3, for test.aspx [2008/03/06 01:44:02, 10] smbd/notify.c:notify_callback(214) notify_callback called for web [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0000 offset: 00000000 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0004 action: 00000003 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0008 namelen: 00000012 [2008/03/06 01:44:02, 5] rpc_parse/parse_prs.c:prs_unistr(1255) 000c name: t.e.s.t...a.s.p.x... [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(234) nt_rep: params_sent_thistime = 30, data_sent_thistime = 0, useable_space = 130994 [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(236) nt_rep: params_to_send = 30, data_to_send = 0, paramsize = 30, datasize = 0 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=5 smb_pid=3788 smb_uid=104 smb_mid=29697 smt_wct=18 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 7680 (0x1E00) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 7680 (0x1E00) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=18944 (0x4A00) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_bcc=33 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 00 00 03 00 00 00 12 00 00 00 74 ........ .......t [010] 00 65 00 73 00 74 00 2E 00 61 00 73 00 70 00 78 .e.s.t.. .a.s.p.x [020] 00 . [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 104 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x68 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1280 of length 108 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35136 smt_wct=15 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=39 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 EC 03 00 00 00 00 5C 00 77 00 65 00 62 ........ .\.w.e.b [010] 00 5C 00 74 00 65 00 73 00 74 00 2E 00 61 00 73 .\.t.e.s .t...a.s [020] 00 70 00 78 00 00 00 .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBtrans2 (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3895) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 3] locking/locking.c:fetch_share_mode_unlocked(834) fill_share_mode_lock failed [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3964) call_trans2qfilepathinfo web/test.aspx (fnum = -1) level=1004 call=5 total_data=0 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/trans2.c:call_trans2qfilepathinfo(4207) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2008/03/06 01:44:02, 5] smbd/trans2.c:call_trans2qfilepathinfo(4217) SMB_QFBI - create: Thu Mar 6 01:43:25 2008 access: Thu Mar 6 01:43:25 2008 write: Thu Mar 6 01:43:59 2008 change: Thu Mar 6 01:43:59 2008 mode: 80 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(830) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(832) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35136 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 80 94 15 9D 44 7F C8 01 80 94 15 ........ .D...... [010] 9D 44 7F C8 01 80 91 59 B1 44 7F C8 01 80 91 59 .D.....Y .D.....Y [020] B1 44 7F C8 01 80 00 00 00 00 00 00 00 .D...... ..... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 84 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x54 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1281 of length 88 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=5 smb_pid=3788 smb_uid=104 smb_mid=35201 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 16 (0x10) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 4059 (0xFDB) smb_vwv[20]= 0 (0x0) smb_vwv[21]=13049 (0x32F9) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 ... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBnttrans (pid 8571) conn 0xb9782748 [2008/03/06 01:44:02, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (1000, 1000) - sec_ctx_stack_ndx = 0 [2008/03/06 01:44:02, 5] auth/token_util.c:debug_nt_user_token(466) NT user token of user S-1-5-21-3024628234-4273217614-616703705-3000 contains 5 SIDs SID[ 0]: S-1-5-21-3024628234-4273217614-616703705-3000 SID[ 1]: S-1-22-2-1000 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2008/03/06 01:44:02, 5] auth/token_util.c:debug_unix_user_token(486) UNIX token of user 1000 Primary group is 1000 and contains 1 supplementary groups Group[ 0]: 1000 [2008/03/06 01:44:02, 5] smbd/uid.c:change_to_user(272) change_to_user uid=(1000,1000) gid=(0,1000) [2008/03/06 01:44:02, 10] smbd/nttrans.c:reply_nttrans(2710) reply_nttrans: state->setup_count = 8 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] DB 0F 00 00 F9 32 01 00 .....2.. [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_notify_change(1434) call_nt_transact_notify_change [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_notify_change(1451) call_nt_transact_notify_change: notify change called on web, filter = FILE_NAME|DIR_NAME|SIZE|LAST_WRITE|CREATION|EA|SECURITY|STREAM_NAME|STREAM_SIZE|STREAM_WRITE, recursive = 1 [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 104 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x68 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1282 of length 108 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35264 smt_wct=15 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=39 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 ED 03 00 00 00 00 5C 00 77 00 65 00 62 ........ .\.w.e.b [010] 00 5C 00 74 00 65 00 73 00 74 00 2E 00 61 00 73 .\.t.e.s .t...a.s [020] 00 70 00 78 00 00 00 .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBtrans2 (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (1000, 1000) - sec_ctx_stack_ndx = 0 [2008/03/06 01:44:02, 5] auth/token_util.c:debug_nt_user_token(466) NT user token of user S-1-5-21-3024628234-4273217614-616703705-3000 contains 5 SIDs SID[ 0]: S-1-5-21-3024628234-4273217614-616703705-3000 SID[ 1]: S-1-22-2-1000 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2008/03/06 01:44:02, 5] auth/token_util.c:debug_unix_user_token(486) UNIX token of user 1000 Primary group is 1000 and contains 1 supplementary groups Group[ 0]: 1000 [2008/03/06 01:44:02, 5] smbd/uid.c:change_to_user(272) change_to_user uid=(1000,1000) gid=(0,1000) [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3895) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005 [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 3] locking/locking.c:fetch_share_mode_unlocked(834) fill_share_mode_lock failed [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3964) call_trans2qfilepathinfo web/test.aspx (fnum = -1) level=1005 call=5 total_data=0 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/trans2.c:call_trans2qfilepathinfo(4228) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(830) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(832) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35264 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 06 00 00 ........ ........ [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 104 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x68 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1283 of length 108 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35328 smt_wct=15 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=39 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 0A 04 00 00 00 00 5C 00 77 00 65 00 62 ........ .\.w.e.b [010] 00 5C 00 74 00 65 00 73 00 74 00 2E 00 61 00 73 .\.t.e.s .t...a.s [020] 00 70 00 78 00 00 00 .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBtrans2 (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3895) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1034 [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 3] locking/locking.c:fetch_share_mode_unlocked(834) fill_share_mode_lock failed [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3964) call_trans2qfilepathinfo web/test.aspx (fnum = -1) level=1034 call=5 total_data=0 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/trans2.c:call_trans2qfilepathinfo(4433) call_trans2qfilepathinfo: SMB_FILE_NETWORK_OPEN_INFORMATION [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(830) t2_rep: params_sent_thistime = 2, data_sent_thistime = 56, useable_space = 131010 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(832) t2_rep: params_to_send = 2, data_to_send = 56, paramsize = 2, datasize = 56 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35328 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 56 (0x38) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 56 (0x38) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=61 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 80 94 15 9D 44 7F C8 01 80 94 15 ........ .D...... [010] 9D 44 7F C8 01 80 91 59 B1 44 7F C8 01 80 91 59 .D.....Y .D.....Y [020] B1 44 7F C8 01 00 00 10 00 00 00 00 00 06 00 00 .D...... ........ [030] 00 00 00 00 00 80 00 00 00 00 00 00 00 ........ ..... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 114 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x72 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1284 of length 118 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=114 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35392 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7168 (0x1C00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=31 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 5C 00 77 00 65 00 62 00 5C 00 74 00 65 00 73 .\.w.e.b .\.t.e.s [010] 00 74 00 2E 00 61 00 73 00 70 00 78 00 00 00 .t...a.s .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBntcreateX (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 10] smbd/nttrans.c:reply_ntcreate_and_X(490) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = web/test.aspx [2008/03/06 01:44:02, 10] smbd/open.c:create_file(2921) create_file: access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = web/test.aspx [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 10] smbd/open.c:create_file_unixpath(2596) create_file_unixpath: access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = web/test.aspx [2008/03/06 01:44:02, 3] smbd/dosmode.c:unix_mode(124) unix_mode(web/test.aspx) returning 0600 [2008/03/06 01:44:02, 10] smbd/open.c:open_file_ntcreate(1201) open_file_ntcreate: fname=web/test.aspx, dos_attrs=0x0 access_mask=0x20000 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0600 oplock_request=0 [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/open.c:open_file_ntcreate(1374) open_file_ntcreate: fname=web/test.aspx, after mapping access_mask=0x20000 [2008/03/06 01:44:02, 5] smbd/files.c:file_new(121) allocated file structure 9391, fnum = 13487 (5 used) [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 0308000000000000D5FD [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb97793e8 [2008/03/06 01:44:02, 4] smbd/open.c:open_file_ntcreate(1644) calling open_file with flags=0x0 flags2=0x0 mode=0600, access_mask = 0x20000, open_access_mask = 0x20000 [2008/03/06 01:44:02, 2] smbd/open.c:open_file(399) intrasup opened file web/test.aspx read=No write=No (numopen=4) [2008/03/06 01:44:02, 10] locking/locking.c:unparse_share_modes(667) unparse_share_modes: del: 0, tok = 0, num: 1 [2008/03/06 01:44:02, 10] locking/locking.c:print_share_mode_table(486) print_share_mode_table: share_mode_entry[0]: pid = 8571, share_access = 0x7, private_options = 0x200000, access_mask = 0x20000, mid = 0x0, type= 0x10, gen_id = 445, uid = 1000, flags = 0, file_id 803:4fdd5 [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 0308000000000000D5FD [2008/03/06 01:44:02, 10] smbd/open.c:create_file_unixpath(2844) create_file_unixpath: info=1 [2008/03/06 01:44:02, 10] smbd/open.c:create_file(3103) create_file: info=1 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/file_access.c:can_access_file(138) can_access_file: requesting 0x2 on file web/test.aspx [2008/03/06 01:44:02, 5] smbd/nttrans.c:reply_ntcreate_and_X(638) reply_ntcreate_and_X: fnum = 13487, open name = web/test.aspx [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35392 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=44800 (0xAF00) smb_vwv[ 3]= 308 (0x134) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]= 5524 (0x1594) smb_vwv[ 7]=17565 (0x449D) smb_vwv[ 8]=51327 (0xC87F) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]= 5524 (0x1594) smb_vwv[11]=17565 (0x449D) smb_vwv[12]=51327 (0xC87F) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=22929 (0x5991) smb_vwv[15]=17585 (0x44B1) smb_vwv[16]=51327 (0xC87F) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=22929 (0x5991) smb_vwv[19]=17585 (0x44B1) smb_vwv[20]=51327 (0xC87F) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 1536 (0x600) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 72 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x48 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1285 of length 76 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35456 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 AF 34 EE 03 ....4.. [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBtrans2 (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3818) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2008/03/06 01:44:02, 10] locking/locking.c:parse_share_modes(512) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2008/03/06 01:44:02, 10] locking/locking.c:parse_share_modes(608) parse_share_modes: share_mode_entry[0]: pid = 8571, share_access = 0x7, private_options = 0x200000, access_mask = 0x20000, mid = 0x0, type= 0x10, gen_id = 445, uid = 1000, flags = 0, file_id 803:4fdd5 [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3964) call_trans2qfilepathinfo web/test.aspx (fnum = 13487) level=1006 call=7 total_data=0 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/trans2.c:call_trans2qfilepathinfo(4333) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(830) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(832) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35456 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 D5 FD 04 00 03 08 00 00 ........ ..... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 84 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x54 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1286 of length 88 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35520 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 AF 34 00 00 07 00 00 00 ....4... ... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBnttrans (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1628) call_nt_transact_query_security_desc: file = web/test.aspx, info_wanted = 0x7 [2008/03/06 01:44:02, 10] smbd/posix_acls.c:posix_get_nt_acl(3118) posix_get_nt_acl: called for file web/test.aspx [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2319) canonicalise_acl: Access ace entries before arrange : [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2332) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2332) canon_ace index 1. Type = allow SID = S-1-22-2-1000 gid 1000 (sites) SMB_ACL_GROUP_OBJ perms --- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2332) canon_ace index 2. Type = allow SID = S-1-5-21-3024628234-4273217614-616703705-3000 uid 1000 (intrasup) SMB_ACL_USER_OBJ perms rw- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:print_canon_ace_list(660) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-3024628234-4273217614-616703705-3000 uid 1000 (intrasup) SMB_ACL_USER_OBJ perms rw- canon_ace index 1. Type = allow SID = S-1-22-2-1000 gid 1000 (sites) SMB_ACL_GROUP_OBJ perms --- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:map_canon_ace_perms(936) map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 12019f [2008/03/06 01:44:02, 10] smbd/posix_acls.c:map_canon_ace_perms(936) map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 [2008/03/06 01:44:02, 10] smbd/posix_acls.c:map_canon_ace_perms(936) map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1660) call_nt_transact_query_security_desc: sd_size = 152. [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(234) nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 130994 [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(236) nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0 [2008/03/06 01:44:02, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(241) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=78 smb_com=0xa0 smb_rcls=35 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35520 smt_wct=18 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1024 (0x400) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=18944 (0x4A00) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_bcc=7 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 98 00 00 00 ....... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 41 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x29 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1287 of length 45 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=65279 smb_uid=110 smb_mid=35584 smt_wct=3 smb_vwv[ 0]=13487 (0x34AF) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBclose (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/reply.c:reply_close(4248) close fd=-1 fnum=13487 (numopen=4) [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 0308000000000000D5FD [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb9778c68 [2008/03/06 01:44:02, 10] locking/locking.c:parse_share_modes(512) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2008/03/06 01:44:02, 10] locking/locking.c:parse_share_modes(608) parse_share_modes: share_mode_entry[0]: pid = 8571, share_access = 0x7, private_options = 0x200000, access_mask = 0x20000, mid = 0x0, type= 0x10, gen_id = 445, uid = 1000, flags = 0, file_id 803:4fdd5 [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 0308000000000000D5FD [2008/03/06 01:44:02, 2] smbd/close.c:close_normal_file(517) intrasup closed file web/test.aspx (numopen=3) NT_STATUS_OK [2008/03/06 01:44:02, 5] smbd/files.c:file_free(448) freed files structure 13487 (4 used) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=65279 smb_uid=110 smb_mid=35584 smt_wct=0 smb_bcc=0 [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 114 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x72 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1288 of length 118 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=114 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35648 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7168 (0x1C00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=31 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 5C 00 77 00 65 00 62 00 5C 00 74 00 65 00 73 .\.w.e.b .\.t.e.s [010] 00 74 00 2E 00 61 00 73 00 70 00 78 00 00 00 .t...a.s .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBntcreateX (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 10] smbd/nttrans.c:reply_ntcreate_and_X(490) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = web/test.aspx [2008/03/06 01:44:02, 10] smbd/open.c:create_file(2921) create_file: access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = web/test.aspx [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 10] smbd/open.c:create_file_unixpath(2596) create_file_unixpath: access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = web/test.aspx [2008/03/06 01:44:02, 3] smbd/dosmode.c:unix_mode(124) unix_mode(web/test.aspx) returning 0600 [2008/03/06 01:44:02, 10] smbd/open.c:open_file_ntcreate(1201) open_file_ntcreate: fname=web/test.aspx, dos_attrs=0x0 access_mask=0x20000 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0600 oplock_request=0 [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/open.c:open_file_ntcreate(1374) open_file_ntcreate: fname=web/test.aspx, after mapping access_mask=0x20000 [2008/03/06 01:44:02, 5] smbd/files.c:file_new(121) allocated file structure 9392, fnum = 13488 (5 used) [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 0308000000000000D5FD [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb97793e8 [2008/03/06 01:44:02, 4] smbd/open.c:open_file_ntcreate(1644) calling open_file with flags=0x0 flags2=0x0 mode=0600, access_mask = 0x20000, open_access_mask = 0x20000 [2008/03/06 01:44:02, 2] smbd/open.c:open_file(399) intrasup opened file web/test.aspx read=No write=No (numopen=4) [2008/03/06 01:44:02, 10] locking/locking.c:unparse_share_modes(667) unparse_share_modes: del: 0, tok = 0, num: 1 [2008/03/06 01:44:02, 10] locking/locking.c:print_share_mode_table(486) print_share_mode_table: share_mode_entry[0]: pid = 8571, share_access = 0x7, private_options = 0x200000, access_mask = 0x20000, mid = 0x0, type= 0x10, gen_id = 446, uid = 1000, flags = 0, file_id 803:4fdd5 [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 0308000000000000D5FD [2008/03/06 01:44:02, 10] smbd/open.c:create_file_unixpath(2844) create_file_unixpath: info=1 [2008/03/06 01:44:02, 10] smbd/open.c:create_file(3103) create_file: info=1 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/file_access.c:can_access_file(138) can_access_file: requesting 0x2 on file web/test.aspx [2008/03/06 01:44:02, 5] smbd/nttrans.c:reply_ntcreate_and_X(638) reply_ntcreate_and_X: fnum = 13488, open name = web/test.aspx [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35648 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=45056 (0xB000) smb_vwv[ 3]= 308 (0x134) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]= 5524 (0x1594) smb_vwv[ 7]=17565 (0x449D) smb_vwv[ 8]=51327 (0xC87F) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]= 5524 (0x1594) smb_vwv[11]=17565 (0x449D) smb_vwv[12]=51327 (0xC87F) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=22929 (0x5991) smb_vwv[15]=17585 (0x44B1) smb_vwv[16]=51327 (0xC87F) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=22929 (0x5991) smb_vwv[19]=17585 (0x44B1) smb_vwv[20]=51327 (0xC87F) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 1536 (0x600) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 84 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x54 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1289 of length 88 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35712 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38912 (0x9800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 B0 34 00 00 07 00 00 00 ....4... ... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBnttrans (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1628) call_nt_transact_query_security_desc: file = web/test.aspx, info_wanted = 0x7 [2008/03/06 01:44:02, 10] smbd/posix_acls.c:posix_get_nt_acl(3118) posix_get_nt_acl: called for file web/test.aspx [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2319) canonicalise_acl: Access ace entries before arrange : [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2332) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2332) canon_ace index 1. Type = allow SID = S-1-22-2-1000 gid 1000 (sites) SMB_ACL_GROUP_OBJ perms --- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:canonicalise_acl(2332) canon_ace index 2. Type = allow SID = S-1-5-21-3024628234-4273217614-616703705-3000 uid 1000 (intrasup) SMB_ACL_USER_OBJ perms rw- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:print_canon_ace_list(660) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-3024628234-4273217614-616703705-3000 uid 1000 (intrasup) SMB_ACL_USER_OBJ perms rw- canon_ace index 1. Type = allow SID = S-1-22-2-1000 gid 1000 (sites) SMB_ACL_GROUP_OBJ perms --- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- [2008/03/06 01:44:02, 10] smbd/posix_acls.c:map_canon_ace_perms(936) map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 12019f [2008/03/06 01:44:02, 10] smbd/posix_acls.c:map_canon_ace_perms(936) map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 [2008/03/06 01:44:02, 10] smbd/posix_acls.c:map_canon_ace_perms(936) map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1660) call_nt_transact_query_security_desc: sd_size = 152. [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(234) nt_rep: params_sent_thistime = 4, data_sent_thistime = 152, useable_space = 130994 [2008/03/06 01:44:02, 9] smbd/nttrans.c:send_nt_replies(236) nt_rep: params_to_send = 4, data_to_send = 152, paramsize = 4, datasize = 152 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=230 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35712 smt_wct=18 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1024 (0x400) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]=38912 (0x9800) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=18944 (0x4A00) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=38912 (0x9800) smb_vwv[12]= 0 (0x0) smb_vwv[13]=19968 (0x4E00) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_bcc=159 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 98 00 00 00 01 00 04 90 14 00 00 00 30 ........ .......0 [010] 00 00 00 00 00 00 00 40 00 00 00 01 05 00 00 00 .......@ ........ [020] 00 00 05 15 00 00 00 0A 2A 48 B4 4E 20 B4 FE D9 ........ *H.N ... [030] 26 C2 24 B8 0B 00 00 01 02 00 00 00 00 00 16 02 &.$..... ........ [040] 00 00 00 E8 03 00 00 02 00 58 00 03 00 00 00 00 ........ .X...... [050] 00 24 00 9F 01 12 00 01 05 00 00 00 00 00 05 15 .$...... ........ [060] 00 00 00 0A 2A 48 B4 4E 20 B4 FE D9 26 C2 24 B8 ....*H.N ...&.$. [070] 0B 00 00 00 00 18 00 00 00 00 00 01 02 00 00 00 ........ ........ [080] 00 00 16 02 00 00 00 E8 03 00 00 00 00 14 00 00 ........ ........ [090] 00 00 00 01 01 00 00 00 00 00 01 00 00 00 00 ........ ....... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 41 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x29 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1290 of length 45 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=65279 smb_uid=110 smb_mid=35776 smt_wct=3 smb_vwv[ 0]=13488 (0x34B0) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBclose (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/reply.c:reply_close(4248) close fd=-1 fnum=13488 (numopen=4) [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 0308000000000000D5FD [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb9778c68 [2008/03/06 01:44:02, 10] locking/locking.c:parse_share_modes(512) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2008/03/06 01:44:02, 10] locking/locking.c:parse_share_modes(608) parse_share_modes: share_mode_entry[0]: pid = 8571, share_access = 0x7, private_options = 0x200000, access_mask = 0x20000, mid = 0x0, type= 0x10, gen_id = 446, uid = 1000, flags = 0, file_id 803:4fdd5 [2008/03/06 01:44:02, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 0308000000000000D5FD [2008/03/06 01:44:02, 2] smbd/close.c:close_normal_file(517) intrasup closed file web/test.aspx (numopen=3) NT_STATUS_OK [2008/03/06 01:44:02, 5] smbd/files.c:file_free(448) freed files structure 13488 (4 used) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=65279 smb_uid=110 smb_mid=35776 smt_wct=0 smb_bcc=0 [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 84 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x54 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1291 of length 88 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35840 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 347 (0x15B) smb_vwv[20]= 0 (0x0) smb_vwv[21]=13131 (0x334B) smb_vwv[22]= 0 (0x0) smb_bcc=3 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 ... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBnttrans (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 10] smbd/nttrans.c:reply_nttrans(2710) reply_nttrans: state->setup_count = 8 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 5B 01 00 00 4B 33 00 00 [...K3.. [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_notify_change(1434) call_nt_transact_notify_change [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_notify_change(1451) call_nt_transact_notify_change: notify change called on web, filter = FILE_NAME|DIR_NAME|SIZE|LAST_WRITE|CREATION|SECURITY, recursive = 0 [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 104 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x68 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1292 of length 108 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35907 smt_wct=15 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=39 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 EC 03 00 00 00 00 5C 00 77 00 65 00 62 ........ .\.w.e.b [010] 00 5C 00 74 00 65 00 73 00 74 00 2E 00 61 00 73 .\.t.e.s .t...a.s [020] 00 70 00 78 00 00 00 .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBtrans2 (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3895) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 3] locking/locking.c:fetch_share_mode_unlocked(834) fill_share_mode_lock failed [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3964) call_trans2qfilepathinfo web/test.aspx (fnum = -1) level=1004 call=5 total_data=0 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/trans2.c:call_trans2qfilepathinfo(4207) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2008/03/06 01:44:02, 5] smbd/trans2.c:call_trans2qfilepathinfo(4217) SMB_QFBI - create: Thu Mar 6 01:43:25 2008 access: Thu Mar 6 01:43:25 2008 write: Thu Mar 6 01:43:59 2008 change: Thu Mar 6 01:43:59 2008 mode: 80 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(830) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(832) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35907 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 80 94 15 9D 44 7F C8 01 80 94 15 ........ .D...... [010] 9D 44 7F C8 01 80 91 59 B1 44 7F C8 01 80 91 59 .D.....Y .D.....Y [020] B1 44 7F C8 01 80 00 00 00 00 00 00 00 .D...... ..... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 104 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x68 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1293 of length 108 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35971 smt_wct=15 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=39 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 ED 03 00 00 00 00 5C 00 77 00 65 00 62 ........ .\.w.e.b [010] 00 5C 00 74 00 65 00 73 00 74 00 2E 00 61 00 73 .\.t.e.s .t...a.s [020] 00 70 00 78 00 00 00 .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBtrans2 (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3895) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005 [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 3] locking/locking.c:fetch_share_mode_unlocked(834) fill_share_mode_lock failed [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3964) call_trans2qfilepathinfo web/test.aspx (fnum = -1) level=1005 call=5 total_data=0 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/trans2.c:call_trans2qfilepathinfo(4228) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(830) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(832) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=35971 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 06 00 00 ........ ........ [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 104 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x68 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1294 of length 108 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=36035 smt_wct=15 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=39 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 0A 04 00 00 00 00 5C 00 77 00 65 00 62 ........ .\.w.e.b [010] 00 5C 00 74 00 65 00 73 00 74 00 2E 00 61 00 73 .\.t.e.s .t...a.s [020] 00 70 00 78 00 00 00 .p.x... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBtrans2 (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3895) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1034 [2008/03/06 01:44:02, 5] smbd/filename.c:unix_convert(149) unix_convert called on file "web/test.aspx" [2008/03/06 01:44:02, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [WEB/TEST.ASPX] -> [web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(854) reduce_name [web/test.aspx] [/hosting/web_virtual/i/intrasup] [2008/03/06 01:44:02, 10] smbd/vfs.c:check_reduced_name(926) reduce_name realpath [web/test.aspx] -> [/hosting/web_virtual/i/intrasup/web/test.aspx] [2008/03/06 01:44:02, 3] smbd/vfs.c:check_reduced_name(963) reduce_name: web/test.aspx reduced to /hosting/web_virtual/i/intrasup/web/test.aspx [2008/03/06 01:44:02, 3] locking/locking.c:fetch_share_mode_unlocked(834) fill_share_mode_lock failed [2008/03/06 01:44:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(3964) call_trans2qfilepathinfo web/test.aspx (fnum = -1) level=1034 call=5 total_data=0 [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(354) dos_mode: web/test.aspx [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2008/03/06 01:44:02, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning [2008/03/06 01:44:02, 10] smbd/trans2.c:call_trans2qfilepathinfo(4433) call_trans2qfilepathinfo: SMB_FILE_NETWORK_OPEN_INFORMATION [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(830) t2_rep: params_sent_thistime = 2, data_sent_thistime = 56, useable_space = 131010 [2008/03/06 01:44:02, 9] smbd/trans2.c:send_trans2_replies(832) t2_rep: params_to_send = 2, data_to_send = 56, paramsize = 2, datasize = 56 [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=36035 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 56 (0x38) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 56 (0x38) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=61 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 00 00 80 94 15 9D 44 7F C8 01 80 94 15 ........ .D...... [010] 9D 44 7F C8 01 80 91 59 B1 44 7F C8 01 80 91 59 .D.....Y .D.....Y [020] B1 44 7F C8 01 00 00 10 00 00 00 00 00 06 00 00 .D...... ........ [030] 00 00 00 00 00 80 00 00 00 00 00 00 00 ........ ..... [2008/03/06 01:44:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(1133) got smb length of 84 [2008/03/06 01:44:02, 6] smbd/process.c:process_smb(1542) got message type 0x0 of len 0x54 [2008/03/06 01:44:02, 3] smbd/process.c:process_smb(1545) Transaction 1295 of length 88 (0 toread) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(598) [2008/03/06 01:44:02, 5] lib/util.c:show_msg(608) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=8 smb_pid=3788 smb_uid=110 smb_mid=36099 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 347 (0x15B) smb_vwv[20]= 0 (0x0) smb_vwv[21]=13070 (0x330E) smb_vwv[22]= 0 (0x0) smb_bcc=3 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 00 00 00 ... [2008/03/06 01:44:02, 3] smbd/process.c:switch_message(1357) switch message SMBnttrans (pid 8571) conn 0xb9794d50 [2008/03/06 01:44:02, 4] smbd/uid.c:change_to_user(182) change_to_user: Skipping user change - already user [2008/03/06 01:44:02, 10] smbd/nttrans.c:reply_nttrans(2710) reply_nttrans: state->setup_count = 8 [2008/03/06 01:44:02, 10] lib/util.c:dump_data(2145) [000] 5B 01 00 00 0E 33 00 00 [....3.. [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_notify_change(1434) call_nt_transact_notify_change [2008/03/06 01:44:02, 3] smbd/nttrans.c:call_nt_transact_notify_change(1451) call_nt_transact_notify_change: notify change called on web, filter = FILE_NAME|DIR_NAME|SIZE|LAST_WRITE|CREATION|SECURITY, recursive = 0