Attachment 3928 Details for Bug 6097 – samba log file

samba log file

jso.txt (text/plain), 33.80 KB, created by Pavel on 2009-02-09 16:42:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Pavel

Created: 2009-02-09 16:42:43 UTC

Size: 33.80 KB

patch

obsolete

>[2009/02/09 11:44:49,  3] smbd/process.c:switch_message(1361)
>  switch message SMBreadX (pid 19933) conn 0x21a79a0
>[2009/02/09 11:44:49,  4] smbd/uid.c:change_to_user(182)
>  change_to_user: Skipping user change - already user
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1258)
>  search for pipe pnum=74ff
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74ff (pipes_open=2)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74fd (pipes_open=2)
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe_hnd.c:read_from_pipe(985)
>  read_from_pipe: 74ff name: NETLOGON len: 1024
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr hdr
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0000 major     : 05
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0001 minor     : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0002 pkt_type  : 02
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0003 flags     : 03
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0004 pack_type0: 10
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0005 pack_type1: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0006 pack_type2: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0007 pack_type3: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0008 frag_len  : 0130
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      000a auth_len  : 0020
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      000c call_id   : 00000004
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000010 smb_io_rpc_hdr_resp resp
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      0010 alloc_hint: 000000ec
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0014 context_id: 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0016 cancel_ct : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0017 reserved  : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000108 smb_io_rpc_hdr_auth hdr_auth
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0108 auth_type    : 44
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0109 auth_level   : 06
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      010a auth_pad_len : 04
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      010b auth_reserved: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      010c auth_context_id: 00000001
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000110 smb_io_rpc_auth_schannel_chk 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>      0110 sig  : 77 00 7a 00 ff ff 00 00 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>      0118 seq_num: 89 7d f6 20 e2 7e 6f 43 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>      0120 packet_digest: ca bc 8c 51 10 06 40 22 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>      0128 confounder: c8 fe bb b0 d1 ad 37 f1 
>[2009/02/09 11:44:49,  3] smbd/pipes.c:reply_pipe_read_and_X(301)
>  readX-IPC pnum=74ff min=1024 max=1024 nread=304
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=363
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=1920
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  304 (0x130)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=304
>[2009/02/09 11:44:49,  6] smbd/process.c:process_smb(1546)
>  got message type 0x0 of len 0x64
>[2009/02/09 11:44:49,  3] smbd/process.c:process_smb(1549)
>  Transaction 31 of length 104 (0 toread)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1284
>  smb_uid=102
>  smb_mid=1984
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=17
>[2009/02/09 11:44:49,  3] smbd/process.c:switch_message(1361)
>  switch message SMBntcreateX (pid 19933) conn 0x218afe0
>[2009/02/09 11:44:49,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (7, 7) - sec_ctx_stack_ndx = 0
>[2009/02/09 11:44:49,  5] auth/token_util.c:debug_nt_user_token(470)
>  NT user token of user S-1-5-21-1481994505-879896800-3128051373-501
>  contains 4 SIDs
>  SID[  0]: S-1-5-21-1481994505-879896800-3128051373-501
>  SID[  1]: S-1-1-0
>  SID[  2]: S-1-5-2
>  SID[  3]: S-1-5-32-546
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/02/09 11:44:49,  5] auth/token_util.c:debug_unix_user_token(490)
>  UNIX token of user 7
>  Primary group is 7 and contains 0 supplementary groups
>[2009/02/09 11:44:49,  5] smbd/uid.c:change_to_user(272)
>  change_to_user uid=(0,7) gid=(0,7)
>[2009/02/09 11:44:49,  4] smbd/nttrans.c:nt_open_pipe(295)
>  nt_open_pipe: Opening pipe \lsarpc.
>[2009/02/09 11:44:49,  3] smbd/nttrans.c:nt_open_pipe(320)
>  nt_open_pipe: Known pipe lsarpc opening.
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(165)
>  Open pipe requested lsarpc (pipes_open=2)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(195)
>  open_rpc_pipe_p: name NETLOGON pnum=74ff
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(195)
>  open_rpc_pipe_p: name NETLOGON pnum=74fd
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(275)
>  Create pipe requested lsarpc
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(356)
>  Created internal pipe lsarpc (pipes_open=2)
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(253)
>  Opened pipe lsarpc with handle 7500 (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(259)
>  open pipes: name lsarpc pnum=7500
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(259)
>  open pipes: name NETLOGON pnum=74ff
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(259)
>  open pipes: name NETLOGON pnum=74fd
>[2009/02/09 11:44:49,  5] smbd/nttrans.c:do_ntcreate_pipe_open(408)
>  do_ntcreate_pipe_open: open pipe = \lsarpc
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1284
>  smb_uid=102
>  smb_mid=1984
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  373 (0x175)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/09 11:44:49,  6] smbd/process.c:process_smb(1546)
>  got message type 0x0 of len 0x88
>[2009/02/09 11:44:49,  3] smbd/process.c:process_smb(1549)
>  Transaction 32 of length 140 (0 toread)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=2048
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=29952 (0x7500)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/02/09 11:44:49,  3] smbd/process.c:switch_message(1361)
>  switch message SMBwriteX (pid 19933) conn 0x218afe0
>[2009/02/09 11:44:49,  4] smbd/uid.c:change_to_user(182)
>  change_to_user: Skipping user change - already user
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1258)
>  search for pipe pnum=7500
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name lsarpc pnum=7500 (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74ff (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74fd (pipes_open=3)
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe_hnd.c:write_to_pipe(927)
>  write_to_pipe: 7500 name: lsarpc open: Yes len: 72
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0000 major     : 05
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0001 minor     : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0002 pkt_type  : 0b
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0003 flags     : 03
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0004 pack_type0: 10
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0005 pack_type1: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0006 pack_type2: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0007 pack_type3: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0008 frag_len  : 0048
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      000a auth_len  : 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      000c call_id   : 00000001
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(472)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe.c:api_pipe_bind_req(1553)
>  api_pipe_bind_req: decode request. 1553
>[2009/02/09 11:44:49,  3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564)
>  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr_rb 
>[2009/02/09 11:44:49,  6] rpc_parse/parse_prs.c:prs_debug(88)
>      000000 smb_io_rpc_hdr_bba 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>          0000 max_tsize: 10b8
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>          0002 max_rsize: 10b8
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>          0004 assoc_gid: 00000000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0008 num_contexts: 01
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      000c context_id  : 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      000e num_transfer_syntaxes: 01
>[2009/02/09 11:44:49,  6] rpc_parse/parse_prs.c:prs_debug(88)
>      00000f smb_io_rpc_iface 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>              0010 data   : 12345778
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>              0014 data   : 1234
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>              0016 data   : abcd
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>              0018 data   : ef 00 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>              001a data   : 01 23 45 67 89 ab 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>          0020 version: 00000000
>[2009/02/09 11:44:49,  6] rpc_parse/parse_prs.c:prs_debug(88)
>      000024 smb_io_rpc_iface 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>              0024 data   : 8a885d04
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>              0028 data   : 1ceb
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>              002a data   : 11c9
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>              002c data   : 9f e8 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>              002e data   : 08 00 2b 10 48 60 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>          0034 version: 00000002
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe.c:api_pipe_bind_req(1608)
>  api_pipe_bind_req: make response. 1608
>[2009/02/09 11:44:49,  3] rpc_server/srv_pipe.c:check_bind_req(991)
>  check_bind_req for \PIPE\lsarpc
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr_ba 
>[2009/02/09 11:44:49,  6] rpc_parse/parse_prs.c:prs_debug(88)
>      000000 smb_io_rpc_hdr_bba 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>          0000 max_tsize: 10b8
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>          0002 max_rsize: 10b8
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>          0004 assoc_gid: 000053f0
>[2009/02/09 11:44:49,  6] rpc_parse/parse_prs.c:prs_debug(88)
>      000008 smb_io_rpc_addr_str 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>          0008 len: 000d
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>          000a str: \PIPE\lsarpc.
>[2009/02/09 11:44:49,  6] rpc_parse/parse_prs.c:prs_debug(88)
>      000017 smb_io_rpc_results 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>          0018 num_results: 01
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>          001c result     : 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>          001e reason     : 0000
>[2009/02/09 11:44:49,  6] rpc_parse/parse_prs.c:prs_debug(88)
>      000020 smb_io_rpc_iface 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>              0020 data   : 8a885d04
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>              0024 data   : 1ceb
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>              0026 data   : 11c9
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>              0028 data   : 9f e8 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8s(865)
>              002a data   : 08 00 2b 10 48 60 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>          0030 version: 00000002
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0000 major     : 05
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0001 minor     : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0002 pkt_type  : 0c
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0003 flags     : 03
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0004 pack_type0: 10
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0005 pack_type1: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0006 pack_type2: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0007 pack_type3: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0008 frag_len  : 0044
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      000a auth_len  : 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      000c call_id   : 00000001
>[2009/02/09 11:44:49,  3] smbd/pipes.c:reply_pipe_write_and_X(251)
>  writeX-IPC pnum=7500 nwritten=72
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=2048
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   72 (0x48)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/09 11:44:49,  6] smbd/process.c:process_smb(1546)
>  got message type 0x0 of len 0x3b
>[2009/02/09 11:44:49,  3] smbd/process.c:process_smb(1549)
>  Transaction 33 of length 63 (0 toread)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=2112
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=29952 (0x7500)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/09 11:44:49,  3] smbd/process.c:switch_message(1361)
>  switch message SMBreadX (pid 19933) conn 0x218afe0
>[2009/02/09 11:44:49,  4] smbd/uid.c:change_to_user(182)
>  change_to_user: Skipping user change - already user
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1258)
>  search for pipe pnum=7500
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name lsarpc pnum=7500 (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74ff (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74fd (pipes_open=3)
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe_hnd.c:read_from_pipe(985)
>  read_from_pipe: 7500 name: lsarpc len: 1024
>[2009/02/09 11:44:49,  3] smbd/pipes.c:reply_pipe_read_and_X(301)
>  readX-IPC pnum=7500 min=1024 max=1024 nread=68
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=127
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=102
>  smb_mid=2112
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   68 (0x44)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=68
>[2009/02/09 11:44:49,  6] smbd/process.c:process_smb(1546)
>  got message type 0x0 of len 0xb4
>[2009/02/09 11:44:49,  3] smbd/process.c:process_smb(1549)
>  Transaction 34 of length 184 (0 toread)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=180
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1284
>  smb_uid=102
>  smb_mid=2176
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   96 (0x60)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   96 (0x60)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=29952 (0x7500)
>  smb_bcc=113
>[2009/02/09 11:44:49,  3] smbd/process.c:switch_message(1361)
>  switch message SMBtrans (pid 19933) conn 0x218afe0
>[2009/02/09 11:44:49,  4] smbd/uid.c:change_to_user(182)
>  change_to_user: Skipping user change - already user
>[2009/02/09 11:44:49,  3] smbd/ipc.c:handle_trans(436)
>  trans <\PIPE\> data=96 params=0 setup=2
>[2009/02/09 11:44:49,  5] smbd/ipc.c:handle_trans(469)
>  calling named_pipe
>[2009/02/09 11:44:49,  3] smbd/ipc.c:named_pipe(387)
>  named pipe command on <> name
>[2009/02/09 11:44:49,  5] smbd/ipc.c:api_fd_reply(307)
>  api_fd_reply
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1258)
>  search for pipe pnum=7500
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name lsarpc pnum=7500 (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74ff (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74fd (pipes_open=3)
>[2009/02/09 11:44:49,  3] smbd/ipc.c:api_fd_reply(345)
>  Got API command 0x26 on pipe "lsarpc" (pnum 7500)
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe_hnd.c:write_to_pipe(927)
>  write_to_pipe: 7500 name: lsarpc open: Yes len: 96
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0000 major     : 05
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0001 minor     : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0002 pkt_type  : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0003 flags     : 03
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0004 pack_type0: 10
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0005 pack_type1: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0006 pack_type2: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0007 pack_type3: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0008 frag_len  : 0060
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      000a auth_len  : 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      000c call_id   : 00000001
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(472)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr_req req
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      0000 alloc_hint: 00000048
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0004 context_id: 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0006 opnum     : 002c
>[2009/02/09 11:44:49,  3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
>  free_pipe_context: destroying talloc pool of size 74
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe.c:api_pipe_request(2262)
>  Requested \PIPE\lsarpc
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe.c:api_rpcTNP(2297)
>  api_rpcTNP: lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe.c:api_rpcTNP(2323)
>  api_rpc_cmds[44].fn == 0x4dd490
>[2009/02/09 11:44:49,  3] lib/util_seaccess.c:se_access_check(249)
>[2009/02/09 11:44:49,  3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-1481994505-879896800-3128051373-501
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-32-546
>[2009/02/09 11:44:49,  5] lib/util_seaccess.c:se_access_check(310)
>  se_access_check: access (801) granted.
>[2009/02/09 11:44:49,  4] rpc_server/srv_lsa_hnd.c:create_policy_hnd(148)
>  Opened policy hnd[1] [000] 00 00 00 00 02 00 00 00  00 00 00 00 90 49 21 09  ........ .....I!.
>  [010] DD 4D 00 00                                       .M.. 
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe.c:api_rpcTNP(2351)
>  api_rpcTNP: called lsarpc successfully
>[2009/02/09 11:44:49,  3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
>  free_pipe_context: destroying talloc pool of size 852
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe_hnd.c:read_from_pipe(985)
>  read_from_pipe: 7500 name: lsarpc len: 1024
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr hdr
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0000 major     : 05
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0001 minor     : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0002 pkt_type  : 02
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0003 flags     : 03
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0004 pack_type0: 10
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0005 pack_type1: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0006 pack_type2: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0007 pack_type3: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0008 frag_len  : 0030
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      000a auth_len  : 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      000c call_id   : 00000001
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000010 smb_io_rpc_hdr_resp resp
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      0010 alloc_hint: 00000018
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0014 context_id: 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0016 cancel_ct : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0017 reserved  : 00
>[2009/02/09 11:44:49,  5] smbd/ipc.c:copy_trans_params_and_data(60)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1284
>  smb_uid=102
>  smb_mid=2176
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/02/09 11:44:49,  6] smbd/process.c:process_smb(1546)
>  got message type 0x0 of len 0xac
>[2009/02/09 11:44:49,  3] smbd/process.c:process_smb(1549)
>  Transaction 35 of length 176 (0 toread)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(642)
>[2009/02/09 11:44:49,  5] lib/util.c:show_msg(652)
>  size=172
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1284
>  smb_uid=102
>  smb_mid=2240
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   88 (0x58)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=29952 (0x7500)
>  smb_bcc=105
>[2009/02/09 11:44:49,  3] smbd/process.c:switch_message(1361)
>  switch message SMBtrans (pid 19933) conn 0x218afe0
>[2009/02/09 11:44:49,  4] smbd/uid.c:change_to_user(182)
>  change_to_user: Skipping user change - already user
>[2009/02/09 11:44:49,  3] smbd/ipc.c:handle_trans(436)
>  trans <\PIPE\> data=88 params=0 setup=2
>[2009/02/09 11:44:49,  5] smbd/ipc.c:handle_trans(469)
>  calling named_pipe
>[2009/02/09 11:44:49,  3] smbd/ipc.c:named_pipe(387)
>  named pipe command on <> name
>[2009/02/09 11:44:49,  5] smbd/ipc.c:api_fd_reply(307)
>  api_fd_reply
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1258)
>  search for pipe pnum=7500
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name lsarpc pnum=7500 (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74ff (pipes_open=3)
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1262)
>  pipe name NETLOGON pnum=74fd (pipes_open=3)
>[2009/02/09 11:44:49,  3] smbd/ipc.c:api_fd_reply(345)
>  Got API command 0x26 on pipe "lsarpc" (pnum 7500)
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe_hnd.c:write_to_pipe(927)
>  write_to_pipe: 7500 name: lsarpc open: Yes len: 88
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr 
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0000 major     : 05
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0001 minor     : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0002 pkt_type  : 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0003 flags     : 03
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0004 pack_type0: 10
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0005 pack_type1: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0006 pack_type2: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint8(624)
>      0007 pack_type3: 00
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0008 frag_len  : 0058
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      000a auth_len  : 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      000c call_id   : 00000002
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(472)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_debug(88)
>  000000 smb_io_rpc_hdr_req req
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint32(718)
>      0000 alloc_hint: 00000040
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0004 context_id: 0000
>[2009/02/09 11:44:49,  5] rpc_parse/parse_prs.c:prs_uint16(689)
>      0006 opnum     : 000f
>[2009/02/09 11:44:49,  3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/02/09 11:44:49,  5] rpc_server/srv_pipe.c:api_pipe_request(2262)
>  Requested \PIPE\lsarpc
>[2009/02/09 11:44:49,  4] rpc_server/srv_pipe.c:api_rpcTNP(2297)
>  api_rpcTNP: lsarpc op 0xf - api_rpcTNP: rpc command: LSA_LOOKUPSIDS
>[2009/02/09 11:44:49,  6] rpc_server/srv_pipe.c:api_rpcTNP(2323)
>  api_rpc_cmds[15].fn == 0x4e1478
>[2009/02/09 11:44:49,  4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(168)
>  Found policy hnd[0] [000] 00 00 00 00 02 00 00 00  00 00 00 00 90 49 21 09  ........ .....I!.
>  [010] DD 4D 00 00                                       .M.. 
>[2009/02/09 11:44:49,  0] lib/fault.c:fault_report(40)
>  ===============================================================
>[2009/02/09 11:44:49,  0] lib/fault.c:fault_report(41)
>  INTERNAL ERROR: Signal 11 in pid 19933 (3.2.5)
>  Please read the Trouble-Shooting section of the Samba3-HOWTO
>[2009/02/09 11:44:49,  0] lib/fault.c:fault_report(43)
>  
>  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
>[2009/02/09 11:44:49,  0] lib/fault.c:fault_report(44)
>  ===============================================================
>[2009/02/09 11:44:49,  0] lib/util.c:smb_panic(1663)
>  PANIC (pid 19933): internal error
>[2009/02/09 11:44:49,  0] lib/util.c:log_stack_trace(1767)
>  BACKTRACE: 18 stack frames:
>   #0 /usr/sbin/smbd(log_stack_trace+0x1c) [0x5ae38d]
>   #1 /usr/sbin/smbd(smb_panic+0x5b) [0x5ae49b]
>   #2 /usr/sbin/smbd [0x59afb4]
>   #3 /lib/libpthread.so.0 [0x7fea92b3fa80]
>   #4 /usr/sbin/smbd(_lsa_LookupSids+0x194) [0x7e26da]
>   #5 /usr/sbin/smbd [0x4e15ec]
>   #6 /usr/sbin/smbd(api_rpcTNP+0x26d) [0x545065]
>   #7 /usr/sbin/smbd(api_pipe_request+0x1f5) [0x54558d]
>   #8 /usr/sbin/smbd [0x53f444]
>   #9 /usr/sbin/smbd(write_to_pipe+0x115) [0x53dbbe]
>   #10 /usr/sbin/smbd [0x775ac7]
>   #11 /usr/sbin/smbd [0x776175]
>   #12 /usr/sbin/smbd(reply_trans+0x727) [0x776e0f]
>   #13 /usr/sbin/smbd [0x4a26ee]
>   #14 /usr/sbin/smbd(smbd_process+0x417) [0x4a4198]
>   #15 /usr/sbin/smbd(main+0x1ff6) [0x47182b]
>   #16 /lib/libc.so.6(__libc_start_main+0xe6) [0x7fea910e21a6]
>   #17 /usr/sbin/smbd [0x46ee09]
>[2009/02/09 11:44:49,  0] lib/util.c:smb_panic(1668)
>  smb_panic(): calling panic action [/usr/share/samba/panic-action 19933]
>[2009/02/09 11:44:49,  0] lib/util.c:smb_panic(1676)
>  smb_panic(): action returned status 0
>[2009/02/09 11:44:49,  3] smbd/sec_ctx.c:push_sec_ctx(224)
>  push_sec_ctx(7, 7) : sec_ctx_stack_ndx = 1
>[2009/02/09 11:44:49,  3] smbd/uid.c:push_conn_ctx(357)
>  push_conn_ctx(102) : conn_ctx_stack_ndx = 0
>[2009/02/09 11:44:49,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/02/09 11:44:49,  5] auth/token_util.c:debug_nt_user_token(464)
>  NT user token: (NULL)
>[2009/02/09 11:44:49,  5] auth/token_util.c:debug_unix_user_token(490)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/09 11:44:49,  0] lib/fault.c:dump_core(201)
>  dumping core in /var/log/samba/cores/smbd
>[2009/02/09 11:44:49,  6] param/loadparm.c:lp_file_list_changed(6724)
>  lp_file_list_changed()
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Mon Feb  9 01:18:26 2009
>  
>[2009/02/09 11:44:49,  5] smbd/reply.c:reply_special(472)
>  init msg_type=0x81 msg_flags=0x0
>[2009/02/09 11:44:49,  3] lib/access.c:only_ipaddrs_in_list(362)
>  only_ipaddrs_in_list: list has non-ip address (192.168.1.)
>[2009/02/09 11:44:49,  3] lib/access.c:check_access(396)
>  check_access: hostnames in host allow/deny list.

Actions: View

Attachments on bug 6097: 3928 | 4008 | 4009