[2009/02/25 11:19:10, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2250 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=11846 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 43 00 2E 00 74 00 6D 00 70 00 00 .f.8.C.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8C.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8c.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Apr 16 10:36:14 2003 access: Wed Feb 25 11:19:10 2009 write: Wed Apr 16 10:36:14 2003 change: Wed Apr 16 10:36:14 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=11846 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 EB B7 DB EA 03 C3 01 00 3B BB ........ ......;. [010] 1D 2A 97 C9 01 00 EB B7 DB EA 03 C3 01 00 EB B7 .*...... ........ [020] DB EA 03 C3 01 80 00 00 00 00 00 00 00 ........ ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 190 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xbe [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2251 of length 194 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=190 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=11904 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=26624 (0x6800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=107 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 57 00 69 00 6E 00 64 .a.m.s.\ .W.i.n.d [040] 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 .o.w.s. .M.e.d.i [050] 00 61 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 .a. .P.l .a.y.e.r [060] 00 2E 00 6C 00 6E 00 6B 00 00 00 ...l.n.k ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Windows Media Player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Windows Media Player.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Windows Media Player.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/WINDOWS MEDIA PLAYER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Windows Media Player.lnk, dirpath = tamme7/start menu/programs, start = Windows Media Player.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Windows Media Player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Windows Media Player.lnk (len 24) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Windows Media Player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Windows Media Player.lnk (len 24) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled windows media player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component windows media player.lnk (len 24) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file windows media player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/windows media player.lnk [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7026, fnum = 11122 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/windows media player.lnk) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/windows media player.lnk, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/windows media player.lnk and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11122 (4 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=11904 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 180 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xb4 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2252 of length 184 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=180 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=11971 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=24064 (0x5E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=97 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 01 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 4F 00 75 00 74 00 6C .a.m.s.\ .O.u.t.l [040] 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 .o.o.k. .E.x.p.r [050] 00 65 00 73 00 73 00 2E 00 6C 00 6E 00 6B 00 00 .e.s.s.. .l.n.k.. [060] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Outlook Express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Outlook Express.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Outlook Express.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/OUTLOOK EXPRESS.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Outlook Express.lnk, dirpath = tamme7/start menu/programs, start = Outlook Express.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Outlook Express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Outlook Express.lnk (len 19) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Outlook Express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Outlook Express.lnk (len 19) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled outlook express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component outlook express.lnk (len 19) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file outlook express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/outlook express.lnk [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7027, fnum = 11123 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/outlook express.lnk) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/outlook express.lnk, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/outlook express.lnk and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11123 (4 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=11971 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2253 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12039 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 6F 2B EC 03 ...o+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11119) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12039 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 80 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2254 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=12102 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 43 00 2E 00 74 00 6D 00 70 00 00 .f.8.C.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8C.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8c.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Apr 16 10:36:14 2003 access: Wed Feb 25 11:19:10 2009 write: Wed Apr 16 10:36:14 2003 change: Wed Apr 16 10:36:14 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=12102 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 EB B7 DB EA 03 C3 01 00 3B BB ........ ......;. [010] 1D 2A 97 C9 01 00 EB B7 DB EA 03 C3 01 00 EB B7 .*...... ........ [020] DB EA 03 C3 01 80 00 00 00 00 00 00 00 ........ ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2255 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12160 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:18:03 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:18:03 2009 change: Wed Feb 25 11:18:03 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12160 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 80 D7 CB F5 29 97 C9 01 00 3B BB ........ .)....;. [010] 1D 2A 97 C9 01 80 D7 CB F5 29 97 C9 01 80 D7 CB .*...... .)...... [020] F5 29 97 C9 01 10 00 00 00 00 00 00 00 .)...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2256 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12231 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 6F 2B FC 03 00 00 00 00 00 16 00 00 00 ...o+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11119) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8d.tmp to 5632 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 5632 smb_set_file_size: file tamme7/templates/prf8d.tmp : setting new size to 5632 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 5] smbd/fileio.c:trigger_write_time_update_immediate(238) Update write time immediate on tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48e68 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12231 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2257 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=12294 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 43 00 2E 00 74 00 6D 00 70 00 00 .f.8.C.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8C.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8c.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Apr 16 10:36:14 2003 access: Wed Feb 25 11:19:10 2009 write: Wed Apr 16 10:36:14 2003 change: Wed Apr 16 10:36:14 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=12294 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 EB B7 DB EA 03 C3 01 00 3B BB ........ ......;. [010] 1D 2A 97 C9 01 00 EB B7 DB EA 03 C3 01 00 EB B7 .*...... ........ [020] DB EA 03 C3 01 80 00 00 00 00 00 00 00 ........ ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2258 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12352 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:18:03 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:18:03 2009 change: Wed Feb 25 11:18:03 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12352 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 80 D7 CB F5 29 97 C9 01 00 3B BB ........ .)....;. [010] 1D 2A 97 C9 01 80 D7 CB F5 29 97 C9 01 80 D7 CB .*...... .)...... [020] F5 29 97 C9 01 10 00 00 00 00 00 00 00 .)...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 132 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x84 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2259 of length 136 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=132 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=12422 smt_wct=15 smb_vwv[ 0]= 64 (0x40) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 64 (0x40) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=67 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 45 00 58 .l.a.t.e .s.\.E.X [030] 00 43 00 45 00 4C 00 39 00 2E 00 58 00 4C 00 53 .C.E.L.9 ...X.L.S [040] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/EXCEL9.XLS" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL9.XLS] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/EXCEL9.XLS, dirpath = tamme7/templates, start = EXCEL9.XLS [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled EXCEL9.XLS ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component EXCEL9.XLS (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled EXCEL9.XLS ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component EXCEL9.XLS (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel9.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel9.xls (len 10) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file excel9.xls [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4037) call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/excel9.xls failed (No such file or directory) [2009/02/25 11:19:10, 3] smbd/error.c:reply_unix_error(154) unix_error_packet: error string = No such file or directory [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=12422 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2260 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12480 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:18:03 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:18:03 2009 change: Wed Feb 25 11:18:03 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12480 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 80 D7 CB F5 29 97 C9 01 00 3B BB ........ .)....;. [010] 1D 2A 97 C9 01 80 D7 CB F5 29 97 C9 01 80 D7 CB .*...... .)...... [020] F5 29 97 C9 01 10 00 00 00 00 00 00 00 .)...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2261 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12551 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:18:03 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:18:03 2009 change: Wed Feb 25 11:18:03 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12551 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 80 D7 CB F5 29 97 C9 01 00 3B BB ........ .)....;. [010] 1D 2A 97 C9 01 80 D7 CB F5 29 97 C9 01 80 D7 CB .*...... .)...... [020] F5 29 97 C9 01 10 00 00 00 00 00 00 00 .)...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2262 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12608 smt_wct=3 smb_vwv[ 0]=11108 (0x2B64) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=-1 fnum=11108 (numopen=4) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000A82C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000A82C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8c.tmp (numopen=3) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11108 (3 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12608 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 154 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x9a [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2263 of length 158 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=154 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12608 smt_wct=1 smb_vwv[ 0]= 22 (0x16) smb_bcc=117 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 04 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 43 00 2E .s.\.p.r .f.8.C.. [030] 00 74 00 6D 00 70 00 00 00 04 98 5C 00 74 00 61 .t.m.p.. ...\.t.a [040] 00 6D 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D .m.m.e.7 .\.T.e.m [050] 00 70 00 6C 00 61 00 74 00 65 00 73 00 5C 00 45 .p.l.a.t .e.s.\.E [060] 00 58 00 43 00 45 00 4C 00 39 00 2E 00 58 00 4C .X.C.E.L .9...X.L [070] 00 53 00 00 00 .S... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBmv (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_mv(6065) reply_mv : tamme7/Templates/prf8C.tmp -> tamme7/Templates/EXCEL9.XLS [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8C.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/EXCEL9.XLS" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL9.XLS] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/EXCEL9.XLS, dirpath = tamme7/templates, start = EXCEL9.XLS [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled EXCEL9.XLS ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component EXCEL9.XLS (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled EXCEL9.XLS ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component EXCEL9.XLS (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel9.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel9.xls (len 10) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file excel9.xls [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5815) rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8c.tmp, newname = tamme7/templates/excel9.xls, last_component_dest = EXCEL9.XLS, is_8_3 = 0 [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7028, fnum = 11124 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8c.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8c.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8c.tmp, after mapping access_mask=0x10000 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000A82C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42e90 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000 [2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87) check_open_rights: file tamme7/templates/prf8c.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED) [2009/02/25 11:19:10, 10] smbd/open.c:open_file(439) open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8c.tmp read=No write=No (numopen=4) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000A82C [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000A82C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d43f30 [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals_fsp(5650) rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8c.tmp -> tamme7/templates/excel9.xls [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8c.tmp [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/excel9.xls [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/excel9.xls [2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408) rename_open_files: renaming file fnum 11124 (file_id 822:522ca8) from tamme7/templates/prf8c.tmp -> tamme7/templates/excel9.xls [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000A82C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000A82C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d445b0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000A82C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/excel9.xls (numopen=3) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11124 (3 used) [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5859) rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8c.tmp -> tamme7/templates/excel9.xls [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12608 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2264 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12679 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 6F 2B EC 03 00 00 00 00 00 00 00 00 00 ...o+... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 00 E0 23 0E 7D ........ .....#.} [020] F7 C2 01 50 30 1B C8 29 97 C9 01 00 00 00 00 00 ...P0..) ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11119) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003 smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d49070 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12679 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2265 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12736 smt_wct=3 smb_vwv[ 0]=11117 (0x2B6D) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=27 fnum=11117 (numopen=3) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8f.tmp (numopen=2) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11117 (2 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12736 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2266 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12807 smt_wct=3 smb_vwv[ 0]=11118 (0x2B6E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=28 fnum=11118 (numopen=2) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8e.tmp (numopen=1) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11118 (1 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=12807 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2267 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12864 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 1793 (0x701) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 8192 (0x2000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1280 (0x500) smb_vwv[18]= 0 (0x0) smb_vwv[19]=17408 (0x4400) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 46 00 2E .s.\.p.r .f.8.F.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Templates/prf8F.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8F.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/PRF8F.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/prf8F.tmp, dirpath = tamme7/templates, start = prf8F.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf8F.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf8F.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf8F.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf8F.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d42b20:size 1a) TAMME7/TEMPLATES/PRF8F.TMP -> tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d42ad0:size 1a) TAMME7/TEMPLATES/PRF8F.TMP -> tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(681) conversion finished tamme7/Templates/prf8F.tmp -> tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7029, fnum = 11125 (2 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8f.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006) open_match_attributes: file tamme7/templates/prf8f.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x7019f [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42cd0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/templates/prf8f.tmp, flags = 0102 mode = 0666, fd = 27. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8f.tmp read=Yes write=Yes (numopen=2) [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8f.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=3 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11125, open name = tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12864 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=29954 (0x7502) smb_vwv[ 3]= 811 (0x32B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 174 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xae [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2268 of length 178 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=174 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12934 smt_wct=15 smb_vwv[ 0]= 106 (0x6A) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 106 (0x6A) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=109 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 5C .r.o.g.r .a.m.s.\ [040] 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 .I.n.t.e .r.n.e.t [050] 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 . .E.x.p .l.o.r.e [060] 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 .r...l.n .k... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled internet explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component internet explorer.lnk (len 21) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file internet explorer.lnk [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4037) call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/start menu/programs/internet explorer.lnk failed (No such file or directory) [2009/02/25 11:19:10, 3] smbd/error.c:reply_unix_error(154) unix_error_packet: error string = No such file or directory [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12934 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2269 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12999 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 1793 (0x701) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 8192 (0x2000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1280 (0x500) smb_vwv[18]= 0 (0x0) smb_vwv[19]=17408 (0x4400) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 45 00 2E .s.\.p.r .f.8.E.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Templates/prf8E.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8E.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/PRF8E.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/prf8E.tmp, dirpath = tamme7/templates, start = prf8E.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf8E.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf8E.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf8E.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf8E.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d42b20:size 1a) TAMME7/TEMPLATES/PRF8E.TMP -> tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d42ad0:size 1a) TAMME7/TEMPLATES/PRF8E.TMP -> tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(681) conversion finished tamme7/Templates/prf8E.tmp -> tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7030, fnum = 11126 (3 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8e.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006) open_match_attributes: file tamme7/templates/prf8e.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x7019f [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42cd0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/templates/prf8e.tmp, flags = 0102 mode = 0666, fd = 28. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8e.tmp read=Yes write=Yes (numopen=3) [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8e.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=3 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11126, open name = tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=12999 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=30210 (0x7602) smb_vwv[ 3]= 811 (0x32B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 154 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x9a [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2270 of length 158 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=154 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13059 smt_wct=15 smb_vwv[ 0]= 86 (0x56) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 86 (0x56) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=89 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 5C .r.o.g.r .a.m.s.\ [040] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. [050] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file desktop.ini [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4037) call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/start menu/programs/desktop.ini failed (No such file or directory) [2009/02/25 11:19:10, 3] smbd/error.c:reply_unix_error(154) unix_error_packet: error string = No such file or directory [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13059 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 70 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x46 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2271 of length 74 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13120 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 05 01 ..... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfsinfo(2592) call_trans2qfsinfo: level = 261 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13120 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 27 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 .'...... .....N.T [010] 00 46 00 53 00 .F.S. [2009/02/25 11:19:10, 4] smbd/trans2.c:call_trans2qfsinfo(3119) SMBtrans2 info_level = 261 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2272 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13192 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 30 00 2E 00 74 00 6D 00 70 00 00 00 .0...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf90.tmp, dirpath = tamme7/start menu/programs, start = prf90.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf90.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf90.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf90.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf90.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf90.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf90.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7031, fnum = 11127 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf90.tmp and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11127 (3 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13192 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2273 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13257 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 31 00 2E 00 74 00 6D 00 70 00 00 00 .1...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf91.tmp, dirpath = tamme7/start menu/programs, start = prf91.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf91.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf91.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf91.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf91.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf91.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf91.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7032, fnum = 11128 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf91.tmp and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11128 (3 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13257 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2274 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13313 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 96 (0x60) smb_vwv[20]= 9 (0x9) smb_vwv[21]=11119 (0x2B6F) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBnttrans (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682) reply_nttrans: state->setup_count = 8 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 60 00 09 00 6F 2B 01 00 `...o+.. [2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741) call_nt_transact_ioctl: function[0x00090060] FID[0x2B6F] isFSctl[0x01] compfilter[0x00] [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa0 smb_rcls=187 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13313 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 184 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xb8 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2275 of length 188 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=184 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13382 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=25088 (0x6200) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=101 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 49 00 6E 00 74 00 65 .a.m.s.\ .I.n.t.e [040] 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 .r.n.e.t . .E.x.p [050] 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E .l.o.r.e .r...l.n [060] 00 6B 00 00 00 .k... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled internet explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component internet explorer.lnk (len 21) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file internet explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7033, fnum = 11129 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/internet explorer.lnk) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/internet explorer.lnk, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/internet explorer.lnk and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11129 (3 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13382 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 70 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x46 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2276 of length 74 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13447 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 05 01 ..... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfsinfo(2592) call_trans2qfsinfo: level = 261 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13447 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 27 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 .'...... .....N.T [010] 00 46 00 53 00 .F.S. [2009/02/25 11:19:10, 4] smbd/trans2.c:call_trans2qfsinfo(3119) SMBtrans2 info_level = 261 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 164 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa4 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2277 of length 168 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=164 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13504 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=19968 (0x4E00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=81 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 64 00 65 00 73 00 6B .a.m.s.\ .d.e.s.k [040] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [050] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7034, fnum = 11130 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/desktop.ini) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/desktop.ini, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/desktop.ini and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11130 (3 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=13504 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2278 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13571 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 75 2B EC 03 ...u+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11125) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13571 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 80 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2279 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13640 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 512 (0x200) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 30 00 2E 00 74 00 6D 00 70 00 00 00 .0...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf90.tmp, dirpath = tamme7/start menu/programs, start = prf90.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf90.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf90.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf90.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf90.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf90.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf90.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7035, fnum = 11131 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, after mapping access_mask=0x20089 [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089 [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf90.tmp, flags = 0300 mode = 0666, fd = 30. [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf90.tmp read=Yes write=No (numopen=4) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B02C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42bd0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B02C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=2 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=2 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11131, open name = tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13640 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=31490 (0x7B02) smb_vwv[ 3]= 555 (0x22B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2280 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13697 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 512 (0x200) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 31 00 2E 00 74 00 6D 00 70 00 00 00 .1...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf91.tmp, dirpath = tamme7/start menu/programs, start = prf91.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf91.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf91.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf91.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf91.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf91.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf91.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7036, fnum = 11132 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, after mapping access_mask=0x20089 [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089 [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf91.tmp, flags = 0300 mode = 0666, fd = 31. [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf91.tmp read=Yes write=No (numopen=5) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B12C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42bd0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B12C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=2 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=2 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11132, open name = tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13697 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=31746 (0x7C02) smb_vwv[ 3]= 555 (0x22B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 5696 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x1640 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2281 of length 5700 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=5696 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=13769 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11119 (0x2B6F) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 5632 (0x1600) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=5633 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 00 3E 00 03 00 FE FF 09 ........ .>...... [020] 00 06 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [030] 00 01 00 00 00 00 00 00 00 00 10 00 00 02 00 00 ........ ........ [040] 00 01 00 00 00 FE FF FF FF 00 00 00 00 00 00 00 ........ ........ [050] 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [060] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [070] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [080] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [090] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [100] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [110] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [120] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [130] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [140] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [150] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [160] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [170] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [180] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [190] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (5632) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8d.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/templates/prf8d.tmp): pos = 0, size = 5632, returned 5632 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11119 num=5632 wrote=5632 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=13769 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 5632 (0x1600) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 184 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xb8 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2282 of length 188 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=184 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13831 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=25088 (0x6200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=101 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 49 00 6E 00 74 00 65 .a.m.s.\ .I.n.t.e [040] 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 .r.n.e.t . .E.x.p [050] 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E .l.o.r.e .r...l.n [060] 00 6B 00 00 00 .k... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled internet explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component internet explorer.lnk (len 21) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file internet explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7037, fnum = 11133 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/internet explorer.lnk) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/internet explorer.lnk, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/internet explorer.lnk and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11133 (5 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13831 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2283 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13894 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 76 2B EC 03 ...v+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11126) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13894 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 80 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 164 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa4 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2284 of length 168 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=164 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13952 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=19968 (0x4E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=81 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 64 00 65 00 73 00 6B .a.m.s.\ .d.e.s.k [040] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [050] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7038, fnum = 11134 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/desktop.ini) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/desktop.ini, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/desktop.ini and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11134 (5 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=13952 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2285 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14019 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 75 2B FC 03 00 00 00 00 DA 11 00 00 00 ...u+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11125) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8f.tmp to 4570 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 4570 smb_set_file_size: file tamme7/templates/prf8f.tmp : setting new size to 4570 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] smbd/fileio.c:trigger_write_time_update_immediate(238) Update write time immediate on tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48fa0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14019 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2286 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14088 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 7B 2B EE 03 ...{+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf90.tmp (fnum = 11131) level=1006 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14088 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 B0 2C 52 00 22 08 00 00 ......,R ."... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2287 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14145 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 7C 2B EE 03 ...|+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf91.tmp (fnum = 11132) level=1006 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14145 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 B1 2C 52 00 22 08 00 00 ......,R ."... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2288 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14210 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 6F 2B FC 03 00 00 00 00 00 16 00 00 00 ...o+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11119) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8d.tmp to 5632 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 5632 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14210 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2289 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14279 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14279 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 10 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2290 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14342 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 76 2B FC 03 00 00 00 00 00 80 01 00 00 ...v+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11126) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8e.tmp to 98304 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 98304 smb_set_file_size: file tamme7/templates/prf8e.tmp : setting new size to 98304 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] smbd/fileio.c:trigger_write_time_update_immediate(238) Update write time immediate on tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48fa0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14342 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2291 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14403 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 75 2B EC 03 00 00 00 00 00 00 00 00 00 ...u+... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 00 E0 23 0E 7D ........ .....#.} [020] F7 C2 01 80 9D 4D C8 29 97 C9 01 00 00 00 00 00 .....M.) ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11125) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003 smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48d88 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14403 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2292 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=14466 smt_wct=3 smb_vwv[ 0]=11131 (0x2B7B) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=30 fnum=11131 (numopen=5) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B02C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B02C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf90.tmp (numopen=4) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11131 (4 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=14466 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2293 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=14534 smt_wct=3 smb_vwv[ 0]=11132 (0x2B7C) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=31 fnum=11132 (numopen=4) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B12C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B12C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf91.tmp (numopen=3) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11132 (3 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=14534 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2294 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14595 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 65 00 78 00 63 00 65 00 6C 00 2E .s.\.e.x .c.e.l.. [030] 00 78 00 6C 00 73 00 00 00 .x.l.s.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Templates/excel.xls [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/excel.xls [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/excel.xls" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL.XLS] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/excel.xls, dirpath = tamme7/templates, start = excel.xls [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file excel.xls [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/excel.xls [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7039, fnum = 11135 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/excel.xls) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/excel.xls, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/templates/excel.xls and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11135 (3 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14595 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2295 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14663 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14663 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 10 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2296 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14722 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 1793 (0x701) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 8192 (0x2000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1280 (0x500) smb_vwv[18]= 0 (0x0) smb_vwv[19]=17408 (0x4400) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 30 00 2E 00 74 00 6D 00 70 00 00 00 .0...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d42960:size 24) TAMME7/START MENU/PROGRAMS/PRF90.TMP -> tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(287) conversion finished tamme7/Start Menu/Programs/prf90.tmp -> tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7040, fnum = 11136 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006) open_match_attributes: file tamme7/start menu/programs/prf90.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, after mapping access_mask=0x7019f [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B02C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42b90 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf90.tmp, flags = 0102 mode = 0666, fd = 30. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf90.tmp read=Yes write=Yes (numopen=4) [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B02C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=3 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11136, open name = tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14722 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=32770 (0x8002) smb_vwv[ 3]= 811 (0x32B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2297 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14790 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 1793 (0x701) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 8192 (0x2000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1280 (0x500) smb_vwv[18]= 0 (0x0) smb_vwv[19]=17408 (0x4400) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 31 00 2E 00 74 00 6D 00 70 00 00 00 .1...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d42960:size 24) TAMME7/START MENU/PROGRAMS/PRF91.TMP -> tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(287) conversion finished tamme7/Start Menu/Programs/prf91.tmp -> tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7041, fnum = 11137 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006) open_match_attributes: file tamme7/start menu/programs/prf91.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, after mapping access_mask=0x7019f [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B12C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42b90 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf91.tmp, flags = 0102 mode = 0666, fd = 31. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf91.tmp read=Yes write=Yes (numopen=5) [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B12C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=3 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11137, open name = tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14790 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=33026 (0x8102) smb_vwv[ 3]= 811 (0x32B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2298 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14851 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 76 2B EC 03 00 00 00 00 00 00 00 00 00 ...v+... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 00 25 EB 47 98 ........ ....%.G. [020] A5 C2 01 40 CC F4 CB 29 97 C9 01 00 00 00 00 00 ...@...) ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11126) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Tue Dec 17 08:48:18 2002 smb_set_file_time: setting pending modtime to Tue Dec 17 08:48:18 2002 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48178 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Tue Dec 17 08:48:18 2002 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14851 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2299 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=14919 smt_wct=3 smb_vwv[ 0]=11119 (0x2B6F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=29 fnum=11119 (numopen=5) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003 smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d481e0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8d.tmp (numopen=4) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11119 (4 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=14919 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2300 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14977 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 96 (0x60) smb_vwv[20]= 9 (0x9) smb_vwv[21]=11125 (0x2B75) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBnttrans (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682) reply_nttrans: state->setup_count = 8 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 60 00 09 00 75 2B 01 00 `...u+.. [2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741) call_nt_transact_ioctl: function[0x00090060] FID[0x2B75] isFSctl[0x01] compfilter[0x00] [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa0 smb_rcls=187 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=14977 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2301 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15048 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15048 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 10 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 70 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x46 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2302 of length 74 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15106 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 05 01 ..... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfsinfo(2592) call_trans2qfsinfo: level = 261 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15106 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 27 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 .'...... .....N.T [010] 00 46 00 53 00 .F.S. [2009/02/25 11:19:10, 4] smbd/trans2.c:call_trans2qfsinfo(3119) SMBtrans2 info_level = 261 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 70 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x46 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2303 of length 74 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15174 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 05 01 ..... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfsinfo(2592) call_trans2qfsinfo: level = 261 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15174 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 27 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 .'...... .....N.T [010] 00 46 00 53 00 .F.S. [2009/02/25 11:19:10, 4] smbd/trans2.c:call_trans2qfsinfo(3119) SMBtrans2 info_level = 261 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2304 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15235 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 96 (0x60) smb_vwv[20]= 9 (0x9) smb_vwv[21]=11126 (0x2B76) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBnttrans (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682) reply_nttrans: state->setup_count = 8 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 60 00 09 00 76 2B 01 00 `...v+.. [2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741) call_nt_transact_ioctl: function[0x00090060] FID[0x2B76] isFSctl[0x01] compfilter[0x00] [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa0 smb_rcls=187 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15235 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2305 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15303 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 44 00 2E .s.\.p.r .f.8.D.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Templates/prf8D.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8D.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7042, fnum = 11138 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8d.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, after mapping access_mask=0x20189 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42b20 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x20189, open_access_mask = 0x20189 [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/templates/prf8d.tmp, flags = 00 mode = 0666, fd = 29. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8d.tmp read=Yes write=No (numopen=1) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=1 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=1 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11138, open name = tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15303 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=33282 (0x8202) smb_vwv[ 3]= 299 (0x12B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 9184 (0x23E0) smb_vwv[ 7]=32014 (0x7D0E) smb_vwv[ 8]=49911 (0xC2F7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 9184 (0x23E0) smb_vwv[15]=32014 (0x7D0E) smb_vwv[16]=49911 (0xC2F7) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 9184 (0x23E0) smb_vwv[19]=32014 (0x7D0E) smb_vwv[20]=49911 (0xC2F7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 22 (0x16) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 4634 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x121a [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2306 of length 4638 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4634 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=15361 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11125 (0x2B75) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4570 (0x11DA) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4571 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE 5B 76 65 72 5D 0D 0A 09 34 0D 0A 5B 73 74 79 .[ver].. .4..[sty [010] 5D 0D 0A 09 0D 0A 5B 66 69 6C 65 73 5D 0D 0A 5B ].....[f iles]..[ [020] 63 68 61 72 73 65 74 5D 0D 0A 09 38 32 0D 0A 09 charset] ...82... [030] 41 4E 53 49 20 28 57 69 6E 64 6F 77 73 2C 20 49 ANSI (Wi ndows, I [040] 42 4D 20 43 50 20 31 32 35 32 29 0D 0A 5B 72 65 BM CP 12 52)..[re [050] 76 69 73 69 6F 6E 73 5D 0D 0A 09 30 0D 0A 5B 70 visions] ...0..[p [060] 72 6E 5D 0D 0A 09 48 50 20 4C 61 73 65 72 4A 65 rn]...HP LaserJe [070] 74 20 49 49 49 53 69 20 50 6F 73 74 53 63 72 69 t IIISi PostScri [080] 70 74 0D 0A 5B 70 6F 72 74 5D 0D 0A 09 5C 5C 50 pt..[por t]...\\P [090] 68 6F 65 6E 69 78 5C 68 70 6C 6A 73 69 0D 0A 5B hoenix\h pljsi..[ [0A0] 6C 61 6E 67 5D 0D 0A 09 31 0D 0A 5B 66 6C 64 6E lang]... 1..[fldn [0B0] 61 6D 65 73 5D 0D 0A 09 46 69 65 6C 64 31 0D 0A ames]... Field1.. [0C0] 09 46 69 65 6C 64 32 0D 0A 09 46 69 65 6C 64 33 .Field2. ..Field3 [0D0] 0D 0A 09 46 69 65 6C 64 34 0D 0A 09 46 69 65 6C ...Field 4...Fiel [0E0] 64 35 0D 0A 09 46 69 65 6C 64 36 0D 0A 09 46 69 d5...Fie ld6...Fi [0F0] 65 6C 64 37 0D 0A 09 46 69 65 6C 64 38 0D 0A 5B eld7...F ield8..[ [100] 64 65 73 63 5D 0D 0A 09 0D 0A 09 0D 0A 09 0D 0A desc]... ........ [110] 09 0D 0A 09 0D 0A 09 37 38 37 33 37 31 34 33 36 .......7 87371436 [120] 0D 0A 09 31 0D 0A 09 37 38 37 33 37 31 34 31 31 ...1...7 87371411 [130] 0D 0A 09 30 0D 0A 09 31 0D 0A 09 30 0D 0A 09 30 ...0...1 ...0...0 [140] 0D 0A 09 30 0D 0A 09 30 0D 0A 09 0D 0A 09 0D 0A ...0...0 ........ [150] 09 0D 0A 09 0D 0A 09 0D 0A 09 0D 0A 09 31 0D 0A ........ .....1.. [160] 5B 66 6F 70 74 73 5D 0D 0A 09 30 0D 0A 09 31 0D [fopts]. ..0...1. [170] 0A 09 30 0D 0A 09 30 0D 0A 09 0D 0A 09 0D 0A 5B ..0...0. .......[ [180] 6C 6E 6F 70 74 73 5D 0D 0A 09 32 0D 0A 09 42 6F lnopts]. ..2...Bo [190] 64 79 20 54 65 78 74 0D 0A 09 31 0D 0A 5B 64 6F dy Text. ..1..[do [1A0] 63 6F 70 74 73 5D 0D 0A 09 35 0D 0A 09 32 0D 0A copts].. .5...2.. [1B0] 5B 47 72 61 6D 53 74 79 6C 65 5D 0D 0A 09 0D 0A [GramSty le]..... [1C0] 5B 74 61 67 5D 0D 0A 09 42 6F 64 79 20 54 65 78 [tag]... Body Tex [1D0] 74 0D 0A 09 32 0D 0A 09 5B 66 6E 74 5D 0D 0A 09 t...2... [fnt]... [1E0] 09 54 69 6D 65 73 20 4E 65 77 20 52 6F 6D 61 6E .Times N ew Roman [1F0] 0D 0A 09 09 32 34 30 0D 0A 09 09 30 0D 0A 09 09 ....240. ...0.... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (4570) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8f.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/templates/prf8f.tmp): pos = 0, size = 4570, returned 4570 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11125 num=4570 wrote=4570 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=15361 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4570 (0x11DA) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2307 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15432 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 53 00 74 00 61 00 72 .m.e.7.\ .S.t.a.r [020] 00 74 00 20 00 4D 00 65 00 6E 00 75 00 5C 00 50 .t. .M.e .n.u.\.P [030] 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 .r.o.g.r .a.m.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning d [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning d [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 10 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15432 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 10 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2308 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15490 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 80 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf90.tmp (fnum = 11136) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15490 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 80 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2309 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15558 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 81 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf91.tmp (fnum = 11137) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15558 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 80 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 65600 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x10040 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2310 of length 65604 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=65600 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=15619 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11126 (0x2B76) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=1 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (65536) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8e.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/templates/prf8e.tmp): pos = 0, size = 65536, returned 65536 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11126 num=65536 wrote=65536 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=15619 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2311 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15687 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 104 (0x68) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 82 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15687 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2312 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15744 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 75 2B FC 03 00 00 00 00 DA 11 00 00 00 ...u+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11125) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8f.tmp to 4570 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 4570 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15744 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2313 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15814 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 33 00 2E 00 74 00 6D 00 70 00 00 00 .3...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf93.tmp, dirpath = tamme7/start menu/programs, start = prf93.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf93.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf93.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf93.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf93.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf93.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf93.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7043, fnum = 11139 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf93.tmp and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11139 (5 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15814 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2314 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15874 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 32 00 2E 00 74 00 6D 00 70 00 00 00 .2...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf92.tmp, dirpath = tamme7/start menu/programs, start = prf92.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf92.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf92.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf92.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf92.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf92.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf92.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7044, fnum = 11140 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf92.tmp and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11140 (5 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=15874 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2315 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15944 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 80 2B FC 03 00 00 00 00 E2 02 00 00 00 ....+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf90.tmp (fnum 11136) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf90.tmp to 738 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 738 smb_set_file_size: file tamme7/start menu/programs/prf90.tmp : setting new size to 738 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/fileio.c:trigger_write_time_update_immediate(238) Update write time immediate on tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B02C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48178 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B02C [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=15944 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2316 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16001 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 81 2B FC 03 00 00 00 00 14 03 00 00 00 ....+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf91.tmp (fnum 11137) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf91.tmp to 788 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 788 smb_set_file_size: file tamme7/start menu/programs/prf91.tmp : setting new size to 788 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/fileio.c:trigger_write_time_update_immediate(238) Update write time immediate on tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B12C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48f90 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B12C [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16001 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 32832 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8040 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2317 of length 32836 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=32832 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=16071 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11126 (0x2B76) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=32768 (0x8000) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=32769 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE 01 01 1D 0F 00 00 00 00 00 00 00 00 03 00 BB ........ ........ [010] 0F 76 0F 31 0F 00 00 00 00 00 00 00 00 00 00 00 .v.1.... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (32768) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/templates/prf8e.tmp): pos = 65536, size = 32768, returned 32768 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11126 num=32768 wrote=32768 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=16071 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=32768 (0x8000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2318 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=16131 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 82 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=16131 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 142 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8e [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2319 of length 146 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=142 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16198 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=14336 (0x3800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=59 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 61 00 6D 00 69 00 70 00 72 00 6F .s.\.a.m .i.p.r.o [030] 00 2E 00 73 00 61 00 6D 00 00 00 ...s.a.m ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Templates/amipro.sam [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/amipro.sam [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/amipro.sam" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/AMIPRO.SAM] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/amipro.sam, dirpath = tamme7/templates, start = amipro.sam [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file amipro.sam [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/amipro.sam [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7045, fnum = 11141 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/amipro.sam) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/amipro.sam, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/templates/amipro.sam and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11141 (5 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16198 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2320 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16258 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 512 (0x200) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 33 00 2E 00 74 00 6D 00 70 00 00 00 .3...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf93.tmp, dirpath = tamme7/start menu/programs, start = prf93.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf93.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf93.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf93.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf93.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf93.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf93.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7046, fnum = 11142 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, after mapping access_mask=0x20089 [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089 [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf93.tmp, flags = 0300 mode = 0666, fd = 32. [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf93.tmp read=Yes write=No (numopen=5) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B52C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42bd0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B52C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=2 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=2 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11142, open name = tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16258 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34306 (0x8602) smb_vwv[ 3]= 555 (0x22B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2321 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16321 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 512 (0x200) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 32 00 2E 00 74 00 6D 00 70 00 00 00 .2...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/prf92.tmp, dirpath = tamme7/start menu/programs, start = prf92.tmp [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf92.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf92.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf92.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf92.tmp (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled prf92.tmp ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component prf92.tmp (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7047, fnum = 11143 (7 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, after mapping access_mask=0x20089 [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089 [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf92.tmp, flags = 0300 mode = 0666, fd = 33. [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf92.tmp read=Yes write=No (numopen=6) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B62C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42bd0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B62C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=2 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=2 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11143, open name = tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16321 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34562 (0x8702) smb_vwv[ 3]= 555 (0x22B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2322 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16392 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 80 2B EC 03 00 00 00 00 00 00 00 00 00 ....+... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 B0 FF 89 F8 29 ........ .......) [020] 97 C9 01 B0 FF 89 F8 29 97 C9 01 00 00 00 00 00 .......) ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf90.tmp (fnum 11136) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B02C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48c58 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B02C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16392 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2323 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16448 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 81 2B EC 03 00 00 00 00 00 00 00 00 00 ....+... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 90 97 D8 EA 29 ........ .......) [020] 97 C9 01 90 97 D8 EA 29 97 C9 01 00 00 00 00 00 .......) ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf91.tmp (fnum 11137) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:17:45 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:17:45 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B12C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48c58 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B12C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:17:45 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16448 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2324 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16515 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 76 2B FC 03 00 00 00 00 00 80 01 00 00 ...v+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11126) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8e.tmp to 98304 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 98304 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16515 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2325 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=16583 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 82 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=16583 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2326 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=16646 smt_wct=3 smb_vwv[ 0]=11125 (0x2B75) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=27 fnum=11125 (numopen=6) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d428a0 [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003 smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48c58 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Mon Mar 31 15:00:00 2003 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8f.tmp (numopen=5) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11125 (6 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=16646 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2327 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16706 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 86 2B EE 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf93.tmp (fnum = 11142) level=1006 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16706 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 B5 2C 52 00 22 08 00 00 ......,R ."... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2328 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16769 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 87 2B EE 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf92.tmp (fnum = 11143) level=1006 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16769 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 B6 2C 52 00 22 08 00 00 ......,R ."... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2329 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16840 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 96 (0x60) smb_vwv[20]= 9 (0x9) smb_vwv[21]=11136 (0x2B80) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBnttrans (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682) reply_nttrans: state->setup_count = 8 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 60 00 09 00 80 2B 01 00 `....+.. [2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741) call_nt_transact_ioctl: function[0x00090060] FID[0x2B80] isFSctl[0x01] compfilter[0x00] [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa0 smb_rcls=187 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16840 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2330 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16896 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 96 (0x60) smb_vwv[20]= 9 (0x9) smb_vwv[21]=11137 (0x2B81) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBnttrans (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682) reply_nttrans: state->setup_count = 8 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 60 00 09 00 81 2B 01 00 `....+.. [2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741) call_nt_transact_ioctl: function[0x00090060] FID[0x2B81] isFSctl[0x01] compfilter[0x00] [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa0 smb_rcls=187 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16896 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 144 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x90 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2331 of length 148 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=144 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16963 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=14848 (0x3A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=61 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 41 00 43 00 43 00 45 00 53 00 53 .s.\.A.C .C.E.S.S [030] 00 39 00 2E 00 4D 00 44 00 42 00 00 00 .9...M.D .B... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Templates/ACCESS9.MDB [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/ACCESS9.MDB [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/ACCESS9.MDB" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/ACCESS9.MDB] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/ACCESS9.MDB, dirpath = tamme7/templates, start = ACCESS9.MDB [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled ACCESS9.MDB ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component ACCESS9.MDB (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled ACCESS9.MDB ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component ACCESS9.MDB (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled access9.mdb ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component access9.mdb (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file access9.mdb [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/access9.mdb [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7048, fnum = 11144 (7 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/access9.mdb) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/access9.mdb, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(1492) open_file_ntcreate: FILE_OPEN requested for file tamme7/templates/access9.mdb and file doesn't exist. [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11144 (6 used) [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=16963 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2332 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17031 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 44 00 2E 00 74 00 6D 00 70 00 00 .f.8.D.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17031 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2333 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17094 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 46 00 2E .s.\.p.r .f.8.F.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Templates/prf8F.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8F.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7049, fnum = 11145 (7 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8f.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x20189 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42ab0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x20189, open_access_mask = 0x20189 [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/templates/prf8f.tmp, flags = 00 mode = 0666, fd = 27. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8f.tmp read=Yes write=No (numopen=2) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=1 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=1 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11145, open name = tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17094 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=35074 (0x8902) smb_vwv[ 3]= 299 (0x12B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 9184 (0x23E0) smb_vwv[ 7]=32014 (0x7D0E) smb_vwv[ 8]=49911 (0xC2F7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 9184 (0x23E0) smb_vwv[15]=32014 (0x7D0E) smb_vwv[16]=49911 (0xC2F7) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 9184 (0x23E0) smb_vwv[19]=32014 (0x7D0E) smb_vwv[20]=49911 (0xC2F7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=55808 (0xDA00) smb_vwv[28]= 17 (0x11) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2334 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17160 smt_wct=3 smb_vwv[ 0]=11142 (0x2B86) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=32 fnum=11142 (numopen=5) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B52C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d428a0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B52C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf93.tmp (numopen=4) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11142 (6 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17160 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2335 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17216 smt_wct=3 smb_vwv[ 0]=11143 (0x2B87) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=33 fnum=11143 (numopen=4) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B62C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B62C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf92.tmp (numopen=3) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11143 (5 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17216 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2336 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17283 smt_wct=3 smb_vwv[ 0]=11126 (0x2B76) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=28 fnum=11126 (numopen=3) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Tue Dec 17 08:48:18 2002 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Tue Dec 17 08:48:18 2002 smb_set_file_time: setting pending modtime to Tue Dec 17 08:48:18 2002 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d486c0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Tue Dec 17 08:48:18 2002 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8e.tmp (numopen=2) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11126 (4 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17283 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 802 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x322 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2337 of length 806 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=802 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17351 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11136 (0x2B80) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 738 (0x2E2) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=739 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE 4C 00 00 00 01 14 02 00 00 00 00 00 C0 00 00 .L...... ........ [010] 00 00 00 00 46 9F 00 00 00 20 00 00 00 00 0B C8 ....F... . ...... [020] 6B 84 E1 C2 01 00 71 D5 EC 29 97 C9 01 00 D7 C5 k.....q. .)...... [030] C9 A4 79 C4 01 00 EC 00 00 00 00 00 00 01 00 00 ..y..... ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 09 01 14 ........ ........ [050] 00 1F 50 E0 4F D0 20 EA 3A 69 10 A2 D8 08 00 2B ..P.O. . :i.....+ [060] 30 30 9D 19 00 2F 43 3A 5C 00 00 00 00 00 00 00 00.../C: \....... [070] 00 00 00 00 00 00 00 00 00 00 00 00 4A 00 31 00 ........ ....J.1. [080] 00 00 00 00 3E 3A B1 3A 30 00 50 52 4F 47 52 41 ....>:.: 0.PROGRA [090] 7E 31 00 00 32 00 03 00 04 00 EF BE 4F 2B 59 62 ~1..2... ....O+Yb [0A0] 59 3A AD 49 14 00 00 00 50 00 72 00 6F 00 67 00 Y:.I.... P.r.o.g. [0B0] 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 r.a.m. . F.i.l.e. [0C0] 73 00 00 00 18 00 4E 00 31 00 00 00 00 00 08 37 s.....N. 1......7 [0D0] 00 92 10 00 4F 55 54 4C 4F 4F 7E 31 00 00 36 00 ....OUTL OO~1..6. [0E0] 03 00 04 00 EF BE 4F 2B 79 9B 59 3A 31 4A 14 00 ......O+ y.Y:1J.. [0F0] 00 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 ..O.u.t. l.o.o.k. [100] 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 .E.x.p. r.e.s.s. [110] 00 00 18 00 42 00 32 00 00 EC 00 00 03 31 1B AF ....B.2. .....1.. [120] 20 00 6D 73 69 6D 6E 2E 65 78 65 00 2A 00 03 00 .msimn. exe.*... [130] 04 00 EF BE 63 2E 29 67 59 3A 33 4A 14 00 00 00 ....c.)g Y:3J.... [140] 6D 00 73 00 69 00 6D 00 6E 00 2E 00 65 00 78 00 m.s.i.m. n...e.x. [150] 65 00 00 00 18 00 00 00 59 00 00 00 1C 00 00 00 e....... Y....... [160] 01 00 00 00 1C 00 00 00 2D 00 00 00 00 00 00 00 ........ -....... [170] 58 00 00 00 11 00 00 00 03 00 00 00 31 AD CB 30 X....... ....1..0 [180] 10 00 00 00 00 43 3A 5C 50 72 6F 67 72 61 6D 20 .....C:\ Program [190] 46 69 6C 65 73 5C 4F 75 74 6C 6F 6F 6B 20 45 78 Files\Ou tlook Ex [1A0] 70 72 65 73 73 5C 6D 73 69 6D 6E 2E 65 78 65 00 press\ms imn.exe. [1B0] 00 14 00 40 00 78 00 70 00 73 00 70 00 31 00 72 ...@.x.p .s.p.1.r [1C0] 00 65 00 73 00 2E 00 64 00 6C 00 6C 00 2C 00 2D .e.s...d .l.l.,.- [1D0] 00 31 00 31 00 30 00 30 00 35 00 33 00 2E 00 2E .1.1.0.0 .5.3.... [1E0] 00 5C 00 2E 00 2E 00 5C 00 2E 00 2E 00 5C 00 2E .\.....\ .....\.. [1F0] 00 2E 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 ...\.P.r .o.g.r.a [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (738) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/start menu/programs/prf90.tmp): pos = 0, size = 738, returned 738 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11136 num=738 wrote=738 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17351 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 738 (0x2E2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 852 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x354 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2338 of length 856 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=852 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17409 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11137 (0x2B81) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 788 (0x314) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=789 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE 4C 00 00 00 01 14 02 00 00 00 00 00 C0 00 00 .L...... ........ [010] 00 00 00 00 46 AF 00 00 00 20 00 00 00 00 1F 57 ....F... . .....W [020] 7E 23 00 C3 01 E0 B5 36 E8 29 97 C9 01 00 CE 4A ~#.....6 .).....J [030] 15 EE F2 C6 01 00 FA 00 00 00 00 00 00 01 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 1D 01 14 ........ ........ [050] 00 1F 50 E0 4F D0 20 EA 3A 69 10 A2 D8 08 00 2B ..P.O. . :i.....+ [060] 30 30 9D 19 00 2F 43 3A 5C 00 00 00 00 00 00 00 00.../C: \....... [070] 00 00 00 00 00 00 00 00 00 00 00 00 4A 00 31 00 ........ ....J.1. [080] 00 00 00 00 3E 3A B1 3A 30 00 50 52 4F 47 52 41 ....>:.: 0.PROGRA [090] 7E 31 00 00 32 00 03 00 04 00 EF BE 4F 2B 59 62 ~1..2... ....O+Yb [0A0] 59 3A AD 49 14 00 00 00 50 00 72 00 6F 00 67 00 Y:.I.... P.r.o.g. [0B0] 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 r.a.m. . F.i.l.e. [0C0] 73 00 00 00 18 00 58 00 31 00 00 00 00 00 25 3A s.....X. 1.....%: [0D0] 0E 51 10 00 57 49 4E 44 4F 57 7E 33 00 00 40 00 .Q..WIND OW~3..@. [0E0] 03 00 04 00 EF BE 4F 2B 7D 9B 58 3A 0C A5 14 00 ......O+ }.X:.... [0F0] 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 ..W.i.n. d.o.w.s. [100] 20 00 4D 00 65 00 64 00 69 00 61 00 20 00 50 00 .M.e.d. i.a. .P. [110] 6C 00 61 00 79 00 65 00 72 00 00 00 18 00 4C 00 l.a.y.e. r.....L. [120] 32 00 00 FA 00 00 52 35 CA 9D 20 00 77 6D 70 6C 2.....R5 .. .wmpl [130] 61 79 65 72 2E 65 78 65 00 00 30 00 03 00 04 00 ayer.exe ..0..... [140] EF BE 8B 2E 71 61 59 3A 34 4A 14 00 00 00 77 00 ....qaY: 4J....w. [150] 6D 00 70 00 6C 00 61 00 79 00 65 00 72 00 2E 00 m.p.l.a. y.e.r... [160] 65 00 78 00 65 00 00 00 1C 00 00 00 61 00 00 00 e.x.e... ....a... [170] 1C 00 00 00 01 00 00 00 1C 00 00 00 2D 00 00 00 ........ ....-... [180] 00 00 00 00 60 00 00 00 11 00 00 00 03 00 00 00 ....`... ........ [190] 31 AD CB 30 10 00 00 00 00 43 3A 5C 50 72 6F 67 1..0.... .C:\Prog [1A0] 72 61 6D 20 46 69 6C 65 73 5C 57 69 6E 64 6F 77 ram File s\Window [1B0] 73 20 4D 65 64 69 61 20 50 6C 61 79 65 72 5C 77 s Media Player\w [1C0] 6D 70 6C 61 79 65 72 2E 65 78 65 00 00 21 00 40 mplayer. exe..!.@ [1D0] 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F .C.:.\.W .I.N.D.O [1E0] 00 57 00 53 00 5C 00 69 00 6E 00 66 00 5C 00 75 .W.S.\.i .n.f.\.u [1F0] 00 6E 00 72 00 65 00 67 00 6D 00 70 00 32 00 2E .n.r.e.g .m.p.2.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (788) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/start menu/programs/prf91.tmp): pos = 0, size = 788, returned 788 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11137 num=788 wrote=788 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=17409 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 788 (0x314) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2339 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17474 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 44 00 2E 00 74 00 6D 00 70 00 00 .f.8.D.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17474 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2340 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17544 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 1793 (0x701) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 9728 (0x2600) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1280 (0x500) smb_vwv[18]= 0 (0x0) smb_vwv[19]=17408 (0x4400) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 33 00 2E 00 74 00 6D 00 70 00 00 00 .3...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x26, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x7019f file_attributes = 0x26, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d429d0:size 24) TAMME7/START MENU/PROGRAMS/PRF93.TMP -> tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(287) conversion finished tamme7/Start Menu/Programs/prf93.tmp -> tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x7019f file_attributes = 0x26, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7050, fnum = 11146 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, dos_attrs=0x26 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006) open_match_attributes: file tamme7/start menu/programs/prf93.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x26 returned_unx_mode = 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, after mapping access_mask=0x7019f [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B52C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42c00 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf93.tmp, flags = 0102 mode = 0666, fd = 28. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf93.tmp read=Yes write=Yes (numopen=3) [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x26 on file tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666 [2009/02/25 11:19:10, 5] smbd/open.c:open_file_ntcreate_internal(2095) open_file_ntcreate: reset attributes of file tamme7/start menu/programs/prf93.tmp to 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B52C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=3 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11146, open name = tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17544 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=35330 (0x8A02) smb_vwv[ 3]= 811 (0x32B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2341 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17606 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 104 (0x68) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 89 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17606 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2342 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17664 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 1793 (0x701) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 8192 (0x2000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1280 (0x500) smb_vwv[18]= 0 (0x0) smb_vwv[19]=17408 (0x4400) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 32 00 2E 00 74 00 6D 00 70 00 00 00 .2...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/statcache.c:stat_cache_add(138) stat_cache_add: Added entry (b8d429d0:size 24) TAMME7/START MENU/PROGRAMS/PRF92.TMP -> tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(287) conversion finished tamme7/Start Menu/Programs/prf92.tmp -> tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7051, fnum = 11147 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006) open_match_attributes: file tamme7/start menu/programs/prf92.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, after mapping access_mask=0x7019f [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B62C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42c00 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/start menu/programs/prf92.tmp, flags = 0102 mode = 0666, fd = 32. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/start menu/programs/prf92.tmp read=Yes write=Yes (numopen=4) [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B62C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=3 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11147, open name = tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17664 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=35586 (0x8B02) smb_vwv[ 3]= 811 (0x32B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=47931 (0xBB3B) smb_vwv[ 7]=10781 (0x2A1D) smb_vwv[ 8]=51607 (0xC997) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=47931 (0xBB3B) smb_vwv[15]=10781 (0x2A1D) smb_vwv[16]=51607 (0xC997) smb_vwv[17]= 1 (0x1) smb_vwv[18]=47931 (0xBB3B) smb_vwv[19]=10781 (0x2A1D) smb_vwv[20]=51607 (0xC997) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2343 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17731 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 45 00 2E .s.\.p.r .f.8.E.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Templates/prf8E.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8E.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7052, fnum = 11148 (7 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8e.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x20189 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42b20 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x3 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x20189, open_access_mask = 0x20189 [2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122) fd_open: name tamme7/templates/prf8e.tmp, flags = 00 mode = 0666, fd = 33. [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8e.tmp read=Yes write=No (numopen=3) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=1 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=1 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11148, open name = tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17731 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=35842 (0x8C02) smb_vwv[ 3]= 299 (0x12B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=60197 (0xEB25) smb_vwv[ 7]=38983 (0x9847) smb_vwv[ 8]=49829 (0xC2A5) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=60197 (0xEB25) smb_vwv[15]=38983 (0x9847) smb_vwv[16]=49829 (0xC2A5) smb_vwv[17]= 1 (0x1) smb_vwv[18]=60197 (0xEB25) smb_vwv[19]=38983 (0x9847) smb_vwv[20]=49829 (0xC2A5) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 384 (0x180) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2344 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17801 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 80 2B FC 03 00 00 00 00 E2 02 00 00 00 ....+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf90.tmp (fnum 11136) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf90.tmp to 738 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 738 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17801 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2345 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17863 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 81 2B FC 03 00 00 00 00 14 03 00 00 00 ....+... ........ [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf91.tmp (fnum 11137) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf91.tmp to 788 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 788 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17863 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 95 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x5f [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2346 of length 99 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=95 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17922 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 23 (0x17) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 23 (0x17) smb_vwv[12]= 72 (0x48) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=30 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 82 2B 03 00 17 00 00 00 11 49 4E 45 54 ....+... ....INET [010] 53 57 49 46 54 30 30 30 30 30 30 30 52 00 SWIFT000 0000R. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 3 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=3 call=7 total_data=23 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4111) cmd=50 (SMBtrans2) NT_STATUS_EAS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=79 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=17922 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 70 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x46 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2347 of length 74 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17992 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 05 01 ..... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfsinfo(2592) call_trans2qfsinfo: level = 261 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=17992 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 27 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 .'...... .....N.T [010] 00 46 00 53 00 .F.S. [2009/02/25 11:19:10, 4] smbd/trans2.c:call_trans2qfsinfo(3119) SMBtrans2 info_level = 261 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2348 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18054 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 89 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18054 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 70 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x46 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2349 of length 74 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18112 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 05 01 ..... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfsinfo(2592) call_trans2qfsinfo: level = 261 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18112 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 27 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 .'...... .....N.T [010] 00 46 00 53 00 .F.S. [2009/02/25 11:19:10, 4] smbd/trans2.c:call_trans2qfsinfo(3119) SMBtrans2 info_level = 261 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2350 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18179 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 104 (0x68) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8C 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18179 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 180 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xb4 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2351 of length 184 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=180 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18247 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=24064 (0x5E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=97 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 4F 00 75 00 74 00 6C .a.m.s.\ .O.u.t.l [040] 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 .o.o.k. .E.x.p.r [050] 00 65 00 73 00 73 00 2E 00 6C 00 6E 00 6B 00 00 .e.s.s.. .l.n.k.. [060] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Outlook Express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Outlook Express.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Outlook Express.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/OUTLOOK EXPRESS.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Outlook Express.lnk, dirpath = tamme7/start menu/programs, start = Outlook Express.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Outlook Express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Outlook Express.lnk (len 19) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Outlook Express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Outlook Express.lnk (len 19) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled outlook express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component outlook express.lnk (len 19) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file outlook express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/outlook express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/outlook express.lnk for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18247 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 190 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xbe [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2352 of length 194 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=190 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18306 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=26624 (0x6800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=107 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 57 00 69 00 6E 00 64 .a.m.s.\ .W.i.n.d [040] 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 .o.w.s. .M.e.d.i [050] 00 61 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 .a. .P.l .a.y.e.r [060] 00 2E 00 6C 00 6E 00 6B 00 00 00 ...l.n.k ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Windows Media Player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Windows Media Player.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Windows Media Player.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/WINDOWS MEDIA PLAYER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Windows Media Player.lnk, dirpath = tamme7/start menu/programs, start = Windows Media Player.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Windows Media Player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Windows Media Player.lnk (len 24) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Windows Media Player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Windows Media Player.lnk (len 24) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled windows media player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component windows media player.lnk (len 24) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file windows media player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/windows media player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/windows media player.lnk for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18306 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2353 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=18376 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11138 (0x2B82) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8d.tmp): pos = 0, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11138 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=18376 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 3E 00 03 00 FE FF 09 00 ........ >....... [020] 06 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ ........ [030] 01 00 00 00 00 00 00 00 00 10 00 00 02 00 00 00 ........ ........ [040] 01 00 00 00 FE FF FF FF 00 00 00 00 00 00 00 00 ........ ........ [050] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [060] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [070] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [080] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [090] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [100] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [110] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [120] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [130] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [140] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [150] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [160] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [170] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [180] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [190] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2354 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18441 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8A 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf93.tmp (fnum = 11146) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18441 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 80 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2355 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18502 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 89 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18502 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2356 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18560 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8B 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/start menu/programs/prf92.tmp (fnum = 11147) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Wed Feb 25 11:19:10 2009 access: Wed Feb 25 11:19:10 2009 write: Wed Feb 25 11:19:10 2009 change: Wed Feb 25 11:19:10 2009 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18560 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 3B BB 1D 2A 97 C9 01 00 3B BB ......;. .*....;. [010] 1D 2A 97 C9 01 00 3B BB 1D 2A 97 C9 01 00 3B BB .*....;. .*....;. [020] 1D 2A 97 C9 01 80 00 00 00 00 00 00 00 .*...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2357 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18627 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8C 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18627 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 180 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xb4 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2358 of length 184 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=180 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18695 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=24064 (0x5E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=97 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 4F 00 75 00 74 00 6C .a.m.s.\ .O.u.t.l [040] 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 .o.o.k. .E.x.p.r [050] 00 65 00 73 00 73 00 2E 00 6C 00 6E 00 6B 00 00 .e.s.s.. .l.n.k.. [060] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Outlook Express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Outlook Express.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Outlook Express.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/OUTLOOK EXPRESS.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Outlook Express.lnk, dirpath = tamme7/start menu/programs, start = Outlook Express.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Outlook Express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Outlook Express.lnk (len 19) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Outlook Express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Outlook Express.lnk (len 19) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled outlook express.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component outlook express.lnk (len 19) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file outlook express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/outlook express.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/outlook express.lnk for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18695 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 190 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xbe [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2359 of length 194 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=190 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18754 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=26624 (0x6800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=107 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 57 00 69 00 6E 00 64 .a.m.s.\ .W.i.n.d [040] 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 .o.w.s. .M.e.d.i [050] 00 61 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 .a. .P.l .a.y.e.r [060] 00 2E 00 6C 00 6E 00 6B 00 00 00 ...l.n.k ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Windows Media Player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Windows Media Player.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Windows Media Player.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/WINDOWS MEDIA PLAYER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Windows Media Player.lnk, dirpath = tamme7/start menu/programs, start = Windows Media Player.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Windows Media Player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Windows Media Player.lnk (len 24) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Windows Media Player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Windows Media Player.lnk (len 24) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled windows media player.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component windows media player.lnk (len 24) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file windows media player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/windows media player.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/windows media player.lnk for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18754 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2360 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18824 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 82 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18824 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2361 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18889 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8A 2B FC 03 00 00 00 00 7A 00 00 00 00 ....+... ...z.... [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf93.tmp (fnum 11146) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf93.tmp to 122 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 122 smb_set_file_size: file tamme7/start menu/programs/prf93.tmp : setting new size to 122 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/fileio.c:trigger_write_time_update_immediate(238) Update write time immediate on tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B52C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48c68 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B52C [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=18889 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2362 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18950 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 46 00 2E 00 74 00 6D 00 70 00 00 .f.8.F.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=18950 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2363 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=19008 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8B 2B FC 03 00 00 00 00 23 03 00 00 00 ....+... ...#.... [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf92.tmp (fnum 11147) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf92.tmp to 803 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 803 smb_set_file_size: file tamme7/start menu/programs/prf92.tmp : setting new size to 803 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/fileio.c:trigger_write_time_update_immediate(238) Update write time immediate on tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B62C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48c68 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B62C [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=19008 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2364 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19075 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8C 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19075 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2365 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19145 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 82 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19145 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2366 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19206 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 46 00 2E 00 74 00 6D 00 70 00 00 .f.8.F.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19206 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2367 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19267 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 45 00 2E 00 74 00 6D 00 70 00 00 .f.8.E.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19267 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2368 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19337 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 44 00 2E 00 74 00 6D 00 70 00 00 .f.8.D.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19337 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 95 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x5f [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2369 of length 99 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=95 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19398 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 23 (0x17) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 23 (0x17) smb_vwv[12]= 72 (0x48) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=30 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 89 2B 03 00 17 00 00 00 11 49 4E 45 54 ....+... ....INET [010] 53 57 49 46 54 30 30 30 30 30 30 30 44 00 SWIFT000 0000D. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 3 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=3 call=7 total_data=23 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4111) cmd=50 (SMBtrans2) NT_STATUS_EAS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=79 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19398 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2370 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19459 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 45 00 2E 00 74 00 6D 00 70 00 00 .f.8.E.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19459 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2371 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19523 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11138 (0x2B82) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1536 (0x600) smb_vwv[ 6]= 1536 (0x600) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 1536 (0x600) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (1536) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8d.tmp): pos = 4096, size = 1536, returned 1536 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11138 max=1536 nread=1536 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=1595 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19523 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1536 (0x600) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=1536 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 00 00 00 1D 00 0F 00 03 00 00 ........ ........ [010] 00 00 00 00 01 00 00 00 00 00 00 00 0A 00 00 00 ........ ........ [020] 09 08 08 00 00 05 10 00 F9 0C CA 07 0B 02 0C 00 ........ ........ [030] 00 00 00 00 00 00 00 00 5F 08 00 00 0D 00 02 00 ........ _....... [040] 01 00 0C 00 02 00 64 00 0F 00 02 00 01 00 11 00 ......d. ........ [050] 02 00 00 00 10 00 08 00 FC A9 F1 D2 4D 62 50 3F ........ ....MbP? [060] 5F 00 02 00 01 00 2A 00 02 00 00 00 2B 00 02 00 _.....*. ....+... [070] 01 00 82 00 02 00 00 00 80 00 08 00 00 00 00 00 ........ ........ [080] 00 00 00 00 25 02 04 00 00 00 FF 00 8C 00 04 00 ....%... ........ [090] 01 00 01 00 81 00 02 00 C1 04 14 00 03 00 02 26 ........ .......& [0A0] 41 15 00 08 00 07 50 61 67 65 20 26 50 83 00 02 A.....Pa ge &P... [0B0] 00 00 00 84 00 02 00 00 00 A1 00 22 00 00 00 01 ........ ...".... [0C0] 00 01 00 01 00 01 00 04 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 E0 3F 00 00 00 00 00 00 E0 3F 01 00 55 ....?... ....?..U [0E0] 00 02 00 08 00 00 02 0A 00 00 00 00 00 00 00 00 ........ ........ [0F0] 01 00 00 3E 02 0A 00 B6 00 00 00 00 00 00 00 00 ...>.... ........ [100] 00 1D 00 0F 00 03 00 00 00 00 00 00 01 00 00 00 ........ ........ [110] 00 00 00 00 0A 00 00 00 09 08 08 00 00 05 10 00 ........ ........ [120] F9 0C CA 07 0B 02 0C 00 00 00 00 00 00 00 00 00 ........ ........ [130] 57 09 00 00 0D 00 02 00 01 00 0C 00 02 00 64 00 W....... ......d. [140] 0F 00 02 00 01 00 11 00 02 00 00 00 10 00 08 00 ........ ........ [150] FC A9 F1 D2 4D 62 50 3F 5F 00 02 00 01 00 2A 00 ....MbP? _.....*. [160] 02 00 00 00 2B 00 02 00 01 00 82 00 02 00 00 00 ....+... ........ [170] 80 00 08 00 00 00 00 00 00 00 00 00 25 02 04 00 ........ ....%... [180] 00 00 FF 00 8C 00 04 00 01 00 01 00 81 00 02 00 ........ ........ [190] C1 04 14 00 03 00 02 26 41 15 00 08 00 07 50 61 .......& A.....Pa [1A0] 67 65 20 26 50 83 00 02 00 00 00 84 00 02 00 00 ge &P... ........ [1B0] 00 A1 00 22 00 00 00 01 00 01 00 01 00 01 00 04 ...".... ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 E0 3F 00 00 00 ........ ....?... [1D0] 00 00 00 E0 3F 01 00 55 00 02 00 08 00 00 02 0A ....?..U ........ [1E0] 00 00 00 00 00 00 00 00 01 00 00 3E 02 0A 00 B6 ........ ...>.... [1F0] 00 00 00 00 00 00 00 00 00 1D 00 0F 00 03 00 00 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2372 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19590 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11145 (0x2B89) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8f.tmp): pos = 0, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11145 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19590 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 5B 76 65 72 5D 0D 0A 09 34 0D 0A 5B 73 74 79 5D [ver]... 4..[sty] [010] 0D 0A 09 0D 0A 5B 66 69 6C 65 73 5D 0D 0A 5B 63 .....[fi les]..[c [020] 68 61 72 73 65 74 5D 0D 0A 09 38 32 0D 0A 09 41 harset]. ..82...A [030] 4E 53 49 20 28 57 69 6E 64 6F 77 73 2C 20 49 42 NSI (Win dows, IB [040] 4D 20 43 50 20 31 32 35 32 29 0D 0A 5B 72 65 76 M CP 125 2)..[rev [050] 69 73 69 6F 6E 73 5D 0D 0A 09 30 0D 0A 5B 70 72 isions]. ..0..[pr [060] 6E 5D 0D 0A 09 48 50 20 4C 61 73 65 72 4A 65 74 n]...HP LaserJet [070] 20 49 49 49 53 69 20 50 6F 73 74 53 63 72 69 70 IIISi P ostScrip [080] 74 0D 0A 5B 70 6F 72 74 5D 0D 0A 09 5C 5C 50 68 t..[port ]...\\Ph [090] 6F 65 6E 69 78 5C 68 70 6C 6A 73 69 0D 0A 5B 6C oenix\hp ljsi..[l [0A0] 61 6E 67 5D 0D 0A 09 31 0D 0A 5B 66 6C 64 6E 61 ang]...1 ..[fldna [0B0] 6D 65 73 5D 0D 0A 09 46 69 65 6C 64 31 0D 0A 09 mes]...F ield1... [0C0] 46 69 65 6C 64 32 0D 0A 09 46 69 65 6C 64 33 0D Field2.. .Field3. [0D0] 0A 09 46 69 65 6C 64 34 0D 0A 09 46 69 65 6C 64 ..Field4 ...Field [0E0] 35 0D 0A 09 46 69 65 6C 64 36 0D 0A 09 46 69 65 5...Fiel d6...Fie [0F0] 6C 64 37 0D 0A 09 46 69 65 6C 64 38 0D 0A 5B 64 ld7...Fi eld8..[d [100] 65 73 63 5D 0D 0A 09 0D 0A 09 0D 0A 09 0D 0A 09 esc].... ........ [110] 0D 0A 09 0D 0A 09 37 38 37 33 37 31 34 33 36 0D ......78 7371436. [120] 0A 09 31 0D 0A 09 37 38 37 33 37 31 34 31 31 0D ..1...78 7371411. [130] 0A 09 30 0D 0A 09 31 0D 0A 09 30 0D 0A 09 30 0D ..0...1. ..0...0. [140] 0A 09 30 0D 0A 09 30 0D 0A 09 0D 0A 09 0D 0A 09 ..0...0. ........ [150] 0D 0A 09 0D 0A 09 0D 0A 09 0D 0A 09 31 0D 0A 5B ........ ....1..[ [160] 66 6F 70 74 73 5D 0D 0A 09 30 0D 0A 09 31 0D 0A fopts].. .0...1.. [170] 09 30 0D 0A 09 30 0D 0A 09 0D 0A 09 0D 0A 5B 6C .0...0.. ......[l [180] 6E 6F 70 74 73 5D 0D 0A 09 32 0D 0A 09 42 6F 64 nopts].. .2...Bod [190] 79 20 54 65 78 74 0D 0A 09 31 0D 0A 5B 64 6F 63 y Text.. .1..[doc [1A0] 6F 70 74 73 5D 0D 0A 09 35 0D 0A 09 32 0D 0A 5B opts]... 5...2..[ [1B0] 47 72 61 6D 53 74 79 6C 65 5D 0D 0A 09 0D 0A 5B GramStyl e].....[ [1C0] 74 61 67 5D 0D 0A 09 42 6F 64 79 20 54 65 78 74 tag]...B ody Text [1D0] 0D 0A 09 32 0D 0A 09 5B 66 6E 74 5D 0D 0A 09 09 ...2...[ fnt].... [1E0] 54 69 6D 65 73 20 4E 65 77 20 52 6F 6D 61 6E 0D Times Ne w Roman. [1F0] 0A 09 09 32 34 30 0D 0A 09 09 30 0D 0A 09 09 34 ...240.. ..0....4 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 95 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x5f [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2373 of length 99 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=95 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19657 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 23 (0x17) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 23 (0x17) smb_vwv[12]= 72 (0x48) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=30 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8C 2B 03 00 17 00 00 00 11 49 4E 45 54 ....+... ....INET [010] 53 57 49 46 54 30 30 30 30 30 30 30 4F 00 SWIFT000 0000O. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 3 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=3 call=7 total_data=23 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4111) cmd=50 (SMBtrans2) NT_STATUS_EAS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=79 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19657 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2374 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19718 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 82 2B EC 03 00 00 00 00 00 00 00 00 00 ....+... ........ [010] 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11138) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19718 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2375 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19782 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11145 (0x2B89) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 474 (0x1DA) smb_vwv[ 6]= 474 (0x1DA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 474 (0x1DA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (474) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8f.tmp): pos = 4096, size = 474, returned 474 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11145 max=474 nread=474 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=533 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19782 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 474 (0x1DA) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=474 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 38 30 30 0D 0A 09 09 32 0D 0A 09 09 32 0D 0A 09 800....2 ....2... [010] 09 34 36 38 30 0D 0A 09 09 33 0D 0A 09 09 39 33 .4680... .3....93 [020] 36 30 0D 0A 09 5B 74 78 74 5D 0D 0A 3E 0D 0A 09 60...[tx t]..>... [030] 5B 66 72 67 68 74 5D 0D 0A 09 5B 6C 79 66 72 6D [frght]. ..[lyfrm [040] 5D 0D 0A 09 09 31 0D 0A 09 09 31 33 32 34 38 0D ]....1.. ..13248. [050] 0A 09 09 30 0D 0A 09 09 31 34 34 30 30 0D 0A 09 ...0.... 14400... [060] 09 31 32 32 34 30 0D 0A 09 09 31 35 38 34 30 0D .12240.. ..15840. [070] 0A 09 09 30 0D 0A 09 09 31 0D 0A 09 09 33 0D 0A ...0.... 1....3.. [080] 09 09 31 20 30 20 30 20 30 20 30 20 30 20 30 0D ..1 0 0 0 0 0 0. [090] 0A 09 09 30 0D 0A 09 09 30 0D 0A 09 09 32 0D 0A ...0.... 0....2.. [0A0] 09 5B 66 72 6D 6C 61 79 5D 0D 0A 09 09 31 35 38 .[frmlay ]....158 [0B0] 34 30 0D 0A 09 09 31 32 32 34 30 0D 0A 09 09 31 40....12 240....1 [0C0] 0D 0A 09 09 31 34 34 30 0D 0A 09 09 37 39 32 0D ....1440 ....792. [0D0] 0A 09 09 31 0D 0A 09 09 31 34 34 37 32 0D 0A 09 ...1.... 14472... [0E0] 09 31 34 34 30 0D 0A 09 09 30 0D 0A 09 09 31 0D .1440... .0....1. [0F0] 0A 09 09 30 0D 0A 09 09 31 0D 0A 09 09 31 0D 0A ...0.... 1....1.. [100] 09 09 30 0D 0A 09 09 31 0D 0A 09 09 31 34 34 30 ..0....1 ....1440 [110] 0D 0A 09 09 31 30 38 30 30 0D 0A 09 09 32 0D 0A ....1080 0....2.. [120] 09 09 32 0D 0A 09 09 34 36 38 30 0D 0A 09 09 33 ..2....4 680....3 [130] 0D 0A 09 09 39 33 36 30 0D 0A 09 5B 74 78 74 5D ....9360 ...[txt] [140] 0D 0A 3E 0D 0A 5B 65 6C 61 79 5D 0D 0A 5B 6C 31 ..>..[el ay]..[l1 [150] 5D 0D 0A 09 30 0D 0A 5B 70 67 5D 0D 0A 09 31 0D ]...0..[ pg]...1. [160] 0A 09 30 20 30 20 30 20 31 30 32 35 20 30 20 30 ..0 0 0 1025 0 0 [170] 20 30 20 30 20 36 35 35 33 35 20 53 74 61 6E 64 0 0 655 35 Stand [180] 61 72 64 09 36 35 35 33 35 20 30 20 30 09 30 20 ard.6553 5 0 0.0 [190] 30 20 30 20 30 20 30 20 30 20 30 20 36 35 35 33 0 0 0 0 0 0 6553 [1A0] 35 20 30 20 30 20 36 35 35 33 35 20 30 20 30 20 5 0 0 65 535 0 0 [1B0] 30 20 30 20 30 0D 0A 5B 65 64 6F 63 5D 0D 0A 3E 0 0 0..[ edoc]..> [1C0] 0D 0A 0D 0A 5B 45 6D 62 65 64 64 65 64 5D 0D 0A ....[Emb edded].. [1D0] 30 30 30 30 34 35 34 38 0D 0A 00004548 .. [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2376 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19849 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 0, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19849 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 01 00 00 53 74 61 6E 64 61 72 64 20 4A 65 74 ....Stan dard Jet [010] 20 44 42 00 01 00 00 00 B5 6E 03 62 60 09 C2 55 DB..... .n.b`..U [020] E9 A9 67 72 40 3F 00 9C 7E 9F 90 FF 85 9A 31 C5 ..gr@?.. ~.....1. [030] 79 BA ED 30 BC DF CC 9D 63 D9 E4 C3 9F 46 FB 8A y..0.... c....F.. [040] BC 4E 61 69 EC 37 BA D6 9C FA 21 CC 28 E6 F4 24 .Nai.7.. ..!.(..$ [050] 8A 60 B3 06 7B 36 12 E0 DF B1 90 66 13 43 28 3D .`..{6.. ...f.C(= [060] B1 33 D3 F3 79 5B 75 27 7C 2A 4F E9 7C 99 08 1F .3..y[u' |*O.|... [070] 98 FD B9 31 87 FD 8E 62 82 66 5F 95 F8 D0 89 24 ...1...b .f_....$ [080] 85 67 C6 1F 27 44 D2 EE CF 65 ED FF 07 C7 46 A1 .g..'D.. .e....F. [090] 78 16 0C ED E9 2D 62 D4 54 06 00 00 34 2E 30 00 x....-b. T...4.0. [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2377 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19910 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 89 2B EC 03 00 00 00 00 00 00 00 00 00 ....+... ........ [010] 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11145) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=19910 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2378 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19974 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]=28672 (0x7000) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 94208, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=19974 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 01 01 19 0C 4C 56 41 4C 00 00 00 00 02 00 6C 0C ....LVAL ......l. [010] 2B 0C 63 0F 50 0F 3D 0F 2A 0F B3 0E A0 0E 8D 0E +.c.P.=. *....... [020] 7A 0E 03 0E F0 0D DD 0D CA 0D B7 0D 40 0D 2D 0D z....... ....@.-. [030] 1A 0D A3 0C 90 0C 7D 0C 6A 0C F3 0B E0 0B CD 0B ......}. j....... [040] BA 0B 43 0B 30 0B 1D 0B 0A 0B F7 0A 80 0A 6D 0A ..C.0... ......m. [050] 5A 0A 47 0A 00 00 00 00 00 00 00 00 00 00 00 00 Z.G..... ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2379 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20038 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 4096, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20038 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 01 01 64 0F 01 00 00 00 00 00 00 00 02 00 BB 0F ..d..... ........ [010] 76 0F 00 00 00 00 00 00 00 00 00 00 00 00 08 00 v....... ........ [020] 00 01 00 02 00 10 00 00 20 00 00 01 00 08 00 20 ........ ...... [030] 00 80 00 00 08 00 00 04 00 00 02 00 00 40 00 00 ........ .....@.. [040] 01 00 80 00 00 40 00 00 00 00 00 00 00 00 00 00 .....@.. ........ [050] 00 00 00 00 00 00 00 00 00 00 00 02 00 05 00 00 ........ ........ [060] 00 00 38 00 00 A8 95 1F 00 01 00 00 00 00 00 00 ..8..... ........ [070] 00 00 00 00 00 00 00 00 00 01 00 00 00 10 00 EC ........ ........ [080] 06 FA ED 0F 30 53 00 79 00 73 00 41 00 63 00 63 ....0S.y .s.A.c.c [090] 00 65 00 73 00 73 00 4F 00 62 00 6A 00 65 00 63 .e.s.s.O .b.j.e.c [0A0] 00 74 00 73 00 87 A2 4C 00 4C 00 4C 00 4C 00 4C .t.s...L .L.L.L.L [0B0] 00 4C 00 4C 00 4C 00 4C 00 4C 00 4A 00 20 00 0B .L.L.L.L .L.J. .. [0C0] 00 FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2380 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=20105 smt_wct=3 smb_vwv[ 0]=11136 (0x2B80) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=30 fnum=11136 (numopen=4) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B02C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d428a0 [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B02C [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B02C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48c90 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B02C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf90.tmp (numopen=3) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11136 (6 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=20105 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2381 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20169 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 30 00 2E 00 74 00 6D 00 70 00 00 00 .0...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP] -> [tamme7/start menu/programs/prf90.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf90.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20169 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2382 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20233 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]=24576 (0x6000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 24576, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20233 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 01 01 59 07 00 00 00 00 00 00 00 00 1F 00 BB 0F ..Y..... ........ [010] 76 0F 31 0F EC 0E A7 0E 62 0E 1D 0E D8 0D 93 0D v.1..... b....... [020] 4E 0D 09 0D C4 0C 7F 0C 3A 0C F5 0B B0 0B 6B 0B N....... :.....k. [030] 26 0B E1 0A 9C 0A 57 0A 12 0A CD 09 88 09 43 09 &.....W. ......C. [040] FE 08 B9 08 74 08 2F 08 EA 07 A5 07 00 00 00 00 ....t./. ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 7F 80 00 00 00 00 00 1C 00 7F 80 00 00 01 00 00 ........ ........ [1F0] 1D 00 7F 80 00 00 02 00 00 1E 00 7F 80 00 00 03 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2383 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20294 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8A 2B EC 03 00 00 00 00 00 00 00 00 00 ....+... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 E0 86 8B F8 29 ........ .......) [020] 97 C9 01 E0 86 8B F8 29 97 C9 01 00 00 00 00 00 .......) ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf93.tmp (fnum 11146) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B52C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48bf8 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B52C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20294 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2384 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20355 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8B 2B EC 03 00 00 00 00 00 00 00 00 00 ....+... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 80 23 56 F6 29 ........ ....#V.) [020] 97 C9 01 80 23 56 F6 29 97 C9 01 00 00 00 00 00 ....#V.) ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf92.tmp (fnum 11147) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:18:04 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:04 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B62C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48b18 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B62C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:18:04 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20355 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2385 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20416 smt_wct=3 smb_vwv[ 0]=11138 (0x2B82) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=29 fnum=11138 (numopen=3) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d428a0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8d.tmp (numopen=2) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11138 (5 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20416 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2386 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20489 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]= 8192 (0x2000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 8192, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20489 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 02 01 DE 0B 00 00 00 00 1A 04 00 00 59 06 00 00 ........ ....Y... [010] 11 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 53 11 00 0B 00 11 00 02 ........ S....... [030] 00 00 00 02 00 00 00 00 06 00 00 01 06 00 00 00 ........ ........ [040] 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 ........ ........ [050] 00 00 00 00 00 00 00 0C 59 06 00 00 09 00 03 00 ........ Y....... [060] 00 00 09 04 00 00 12 00 00 00 00 00 00 00 00 00 ........ ........ [070] 0C 59 06 00 00 08 00 02 00 00 00 09 04 00 00 12 .Y...... ........ [080] 00 00 00 00 00 00 00 00 00 08 59 06 00 00 04 00 ........ ..Y..... [090] 01 00 00 00 09 04 00 00 13 00 00 00 00 00 0A 00 ........ ........ [0A0] 08 00 08 59 06 00 00 05 00 01 00 00 00 09 04 00 ...Y.... ........ [0B0] 00 13 00 00 00 00 00 12 00 08 00 04 59 06 00 00 ........ ....Y... [0C0] 07 00 02 00 00 00 09 04 00 00 13 00 00 00 00 00 ........ ........ [0D0] 1A 00 04 00 0A 59 06 00 00 0A 00 04 00 00 00 09 .....Y.. ........ [0E0] 04 00 00 12 00 00 00 00 00 00 00 FE 01 04 59 06 ........ ......Y. [0F0] 00 00 00 00 00 00 00 00 09 04 00 00 13 00 00 00 ........ ........ [100] 00 00 00 00 04 00 0B 59 06 00 00 0D 00 07 00 00 .......Y ........ [110] 00 09 04 00 00 12 00 00 00 00 00 00 00 00 00 0B ........ ........ [120] 59 06 00 00 10 00 0A 00 00 00 09 04 00 00 12 00 Y....... ........ [130] 00 00 00 00 00 00 00 00 0B 59 06 00 00 0F 00 09 ........ .Y...... [140] 00 00 00 09 04 00 00 12 00 00 00 00 00 00 00 00 ........ ........ [150] 00 0B 59 06 00 00 0E 00 08 00 00 00 09 04 00 00 ..Y..... ........ [160] 12 00 00 00 00 00 00 00 00 00 0A 59 06 00 00 02 ........ ...Y.... [170] 00 00 00 00 00 09 04 00 00 12 00 00 00 00 00 00 ........ ........ [180] 00 FE 01 09 59 06 00 00 06 00 01 00 00 00 09 04 ....Y... ........ [190] 00 00 32 00 00 00 00 00 00 00 FE 01 04 59 06 00 ..2..... .....Y.. [1A0] 00 01 00 00 00 00 00 09 04 00 00 13 00 00 00 00 ........ ........ [1B0] 00 04 00 04 00 0B 59 06 00 00 0C 00 06 00 00 00 ......Y. ........ [1C0] 09 04 00 00 12 00 00 00 00 00 00 00 00 00 09 59 ........ .......Y [1D0] 06 00 00 0B 00 05 00 00 00 09 04 00 00 12 00 00 ........ ........ [1E0] 00 00 00 00 00 FE 01 03 59 06 00 00 03 00 01 00 ........ Y....... [1F0] 00 00 09 04 00 00 13 00 00 00 00 00 08 00 02 00 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2387 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20552 smt_wct=3 smb_vwv[ 0]=11145 (0x2B89) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=27 fnum=11145 (numopen=2) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8f.tmp (numopen=1) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11145 (4 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20552 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2388 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20611 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 96 (0x60) smb_vwv[20]= 9 (0x9) smb_vwv[21]=11146 (0x2B8A) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBnttrans (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682) reply_nttrans: state->setup_count = 8 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 60 00 09 00 8A 2B 01 00 `....+.. [2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741) call_nt_transact_ioctl: function[0x00090060] FID[0x2B8A] isFSctl[0x01] compfilter[0x00] [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa0 smb_rcls=187 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20611 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2389 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20678 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 96 (0x60) smb_vwv[20]= 9 (0x9) smb_vwv[21]=11147 (0x2B8B) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBnttrans (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682) reply_nttrans: state->setup_count = 8 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 60 00 09 00 8B 2B 01 00 `....+.. [2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741) call_nt_transact_ioctl: function[0x00090060] FID[0x2B8B] isFSctl[0x01] compfilter[0x00] [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa0 smb_rcls=187 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20678 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2390 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20736 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4352 (0x1100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 7E 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C ~\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 44 00 2E .s.\.p.r .f.8.D.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Templates/prf8D.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8D.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7053, fnum = 11149 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8d.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, dos_attrs=0x0 access_mask=0x110080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, after mapping access_mask=0x110080 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d430d0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x110080, open_access_mask = 0x110080 [2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87) check_open_rights: file tamme7/templates/prf8d.tmp requesting 0x110080 returning 0x10000 (NT_STATUS_ACCESS_DENIED) [2009/02/25 11:19:10, 10] smbd/open.c:open_file(439) open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8d.tmp read=No write=No (numopen=4) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=1 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=1 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11149, open name = tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20736 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=36096 (0x8D00) smb_vwv[ 3]= 299 (0x12B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 9184 (0x23E0) smb_vwv[ 7]=32014 (0x7D0E) smb_vwv[ 8]=49911 (0xC2F7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 9184 (0x23E0) smb_vwv[15]=32014 (0x7D0E) smb_vwv[16]=49911 (0xC2F7) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 9184 (0x23E0) smb_vwv[19]=32014 (0x7D0E) smb_vwv[20]=49911 (0xC2F7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 22 (0x16) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2391 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20808 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4352 (0x1100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 46 00 2E .s.\.p.r .f.8.F.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Templates/prf8F.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8F.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7054, fnum = 11150 (6 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8f.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x0 access_mask=0x110080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x110080 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d430d0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x110080, open_access_mask = 0x110080 [2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87) check_open_rights: file tamme7/templates/prf8f.tmp requesting 0x110080 returning 0x10000 (NT_STATUS_ACCESS_DENIED) [2009/02/25 11:19:10, 10] smbd/open.c:open_file(439) open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8f.tmp read=No write=No (numopen=5) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=1 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=1 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11150, open name = tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=20808 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=36352 (0x8E00) smb_vwv[ 3]= 299 (0x12B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 9184 (0x23E0) smb_vwv[ 7]=32014 (0x7D0E) smb_vwv[ 8]=49911 (0xC2F7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 9184 (0x23E0) smb_vwv[15]=32014 (0x7D0E) smb_vwv[16]=49911 (0xC2F7) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 9184 (0x23E0) smb_vwv[19]=32014 (0x7D0E) smb_vwv[20]=49911 (0xC2F7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=55808 (0xDA00) smb_vwv[28]= 17 (0x11) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2392 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20873 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]=12288 (0x3000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 12288, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=20873 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 02 01 A9 0E 00 00 00 00 4F 01 00 00 59 06 00 00 ........ O...Y... [010] 35 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 5....... ........ [020] 00 00 00 00 00 00 00 00 53 04 00 01 00 04 00 01 ........ S....... [030] 00 00 00 01 00 00 00 12 06 00 00 13 06 00 00 00 ........ ........ [040] 00 00 00 11 00 00 00 00 00 00 00 04 59 06 00 00 ........ ....Y... [050] 02 00 01 00 00 00 09 04 00 00 13 00 00 00 00 00 ........ ........ [060] 04 00 04 00 01 59 06 00 00 03 00 01 00 00 00 09 .....Y.. ........ [070] 04 00 00 13 00 00 00 00 00 00 00 01 00 04 59 06 ........ ......Y. [080] 00 00 00 00 00 00 00 00 09 04 00 00 13 00 00 00 ........ ........ [090] 00 00 00 00 04 00 09 59 06 00 00 01 00 00 00 00 .......Y ........ [0A0] 00 09 04 00 00 32 00 00 00 00 00 07 00 FE 01 06 .....2.. ........ [0B0] 00 41 00 43 00 4D 00 18 00 46 00 49 00 6E 00 68 .A.C.M.. .F.I.n.h [0C0] 00 65 00 72 00 69 00 74 00 61 00 62 00 6C 00 65 .e.r.i.t .a.b.l.e [0D0] 00 10 00 4F 00 62 00 6A 00 65 00 63 00 74 00 49 ...O.b.j .e.c.t.I [0E0] 00 64 00 06 00 53 00 49 00 44 00 83 07 00 00 00 .d...S.I .D...... [0F0] 00 01 FF FF 00 FF FF 00 FF FF 09 FF FF 00 FF FF ........ ........ [100] 00 FF FF 00 FF FF 04 FF FF 12 FF FF 00 14 06 00 ........ ........ [110] 00 09 00 00 00 41 00 74 00 88 00 00 00 00 00 59 .....A.t .......Y [120] 06 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF ........ ........ [130] 00 00 00 00 04 04 00 00 00 00 00 10 00 4F 00 62 ........ .....O.b [140] 00 6A 00 65 00 63 00 74 00 49 00 64 00 FF FF 00 .j.e.c.t .I.d.... [150] 00 00 00 00 00 00 00 34 36 7D 23 35 2E 30 23 00 .......4 6}#5.0#. [160] 30 23 43 3A 5C 50 72 6F 00 67 72 61 6D 20 46 69 0#C:\Pro .gram Fi [170] 6C 00 65 73 5C 43 6F 6D 6D 6F 02 6E 04 0C 4D 69 l.es\Com mo.n..Mi [180] 63 72 6F 73 00 6F 66 74 20 53 68 61 72 08 65 64 cros.oft Shar.ed [190] 5C 00 77 5C 64 61 6F 00 33 36 30 2E 64 6C 6C 23 \.w\dao. 360.dll# [1A0] 03 87 0F 00 0C 20 33 2E 36 20 4F 00 62 6A 65 63 ..... 3. 6 O.bjec [1B0] 74 20 4C 69 60 62 72 61 72 79 00 48 00 01 16 02 t Li`bra ry.H.... [1C0] 00 01 7C 41 44 4F 44 42 3E 44 00 0A 00 08 41 00 ..|ADODB >D....A. [1D0] 44 00 5A 44 D4 00 42 00 5C 99 80 07 8F 80 01 04 D.ZD..B. \....... [1E0] 5C 43 00 5D 07 5C 31 30 2D 38 03 5C 41 00 41 30 \C.].\10 -8.\A.A0 [1F0] 30 36 44 32 45 41 40 34 7D 23 32 2E 31 04 5C 52 06D2EA@4 }#2.1.\R [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 186 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xba [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2393 of length 190 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=186 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=20931 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11146 (0x2B8A) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 122 (0x7A) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=123 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE 5B 4C 6F 63 61 6C 69 7A 65 64 46 69 6C 65 4E .[Locali zedFileN [010] 61 6D 65 73 5D 0D 0A 4F 75 74 6C 6F 6F 6B 20 45 ames]..O utlook E [020] 78 70 72 65 73 73 2E 6C 6E 6B 3D 40 78 70 73 70 xpress.l nk=@xpsp [030] 31 72 65 73 2E 64 6C 6C 2C 2D 31 31 30 30 34 0D 1res.dll ,-11004. [040] 0A 57 69 6E 64 6F 77 73 20 4D 65 64 69 61 20 50 .Windows Media P [050] 6C 61 79 65 72 2E 6C 6E 6B 3D 40 43 3A 5C 57 49 layer.ln k=@C:\WI [060] 4E 44 4F 57 53 5C 69 6E 66 5C 75 6E 72 65 67 6D NDOWS\in f\unregm [070] 70 32 2E 65 78 65 2C 2D 34 0D 0A p2.exe,- 4.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (122) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/start menu/programs/prf93.tmp): pos = 0, size = 122, returned 122 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11146 num=122 wrote=122 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=20931 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 122 (0x7A) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 867 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x363 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2394 of length 871 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=867 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=20998 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11147 (0x2B8B) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 803 (0x323) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=804 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] EE 4C 00 00 00 01 14 02 00 00 00 00 00 C0 00 00 .L...... ........ [010] 00 00 00 00 46 9F 00 00 00 20 00 00 00 40 BC 5B ....F... . ...@.[ [020] 39 6E 5A C3 01 90 0C 36 F6 29 97 C9 01 80 10 17 9nZ....6 .)...... [030] 32 9A 61 C9 01 A8 AC 09 00 00 00 00 00 01 00 00 2.a..... ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 17 01 14 ........ ........ [050] 00 1F 50 E0 4F D0 20 EA 3A 69 10 A2 D8 08 00 2B ..P.O. . :i.....+ [060] 30 30 9D 19 00 2F 43 3A 5C 00 00 00 00 00 00 00 00.../C: \....... [070] 00 00 00 00 00 00 00 00 00 00 00 00 4A 00 31 00 ........ ....J.1. [080] 00 00 00 00 3E 3A B1 3A 30 00 50 52 4F 47 52 41 ....>:.: 0.PROGRA [090] 7E 31 00 00 32 00 03 00 04 00 EF BE 4F 2B 59 62 ~1..2... ....O+Yb [0A0] 59 3A AD 49 14 00 00 00 50 00 72 00 6F 00 67 00 Y:.I.... P.r.o.g. [0B0] 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 r.a.m. . F.i.l.e. [0C0] 73 00 00 00 18 00 52 00 31 00 00 00 00 00 4B 3A s.....R. 1.....K: [0D0] 5A 2F 10 00 49 4E 54 45 52 4E 7E 31 00 00 3A 00 Z/..INTE RN~1..:. [0E0] 03 00 04 00 EF BE 4F 2B 77 9B 59 3A 2E 4A 14 00 ......O+ w.Y:.J.. [0F0] 00 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 ..I.n.t. e.r.n.e. [100] 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 t. .E.x. p.l.o.r. [110] 65 00 72 00 00 00 18 00 4C 00 32 00 A8 AC 09 00 e.r..... L.2..... [120] 93 39 2D 2B 20 00 69 65 78 70 6C 6F 72 65 2E 65 .9-+ .ie xplore.e [130] 78 65 00 00 30 00 03 00 04 00 EF BE 04 2F A8 4E xe..0... ...../.N [140] 59 3A 42 4A 14 00 00 00 69 00 65 00 78 00 70 00 Y:BJ.... i.e.x.p. [150] 6C 00 6F 00 72 00 65 00 2E 00 65 00 78 00 65 00 l.o.r.e. ..e.x.e. [160] 00 00 1C 00 00 00 5E 00 00 00 1C 00 00 00 01 00 ......^. ........ [170] 00 00 1C 00 00 00 2D 00 00 00 00 00 00 00 5D 00 ......-. ......]. [180] 00 00 11 00 00 00 03 00 00 00 31 AD CB 30 10 00 ........ ..1..0.. [190] 00 00 00 43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 ...C:\Pr ogram Fi [1A0] 6C 65 73 5C 49 6E 74 65 72 6E 65 74 20 45 78 70 les\Inte rnet Exp [1B0] 6C 6F 72 65 72 5C 69 65 78 70 6C 6F 72 65 2E 65 lorer\ie xplore.e [1C0] 78 65 00 00 26 00 40 00 22 00 25 00 77 00 69 00 xe..&.@. ".%.w.i. [1D0] 6E 00 64 00 69 00 72 00 25 00 5C 00 53 00 79 00 n.d.i.r. %.\.S.y. [1E0] 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 69 00 s.t.e.m. 3.2.\.i. [1F0] 65 00 34 00 75 00 69 00 6E 00 69 00 74 00 2E 00 e.4.u.i. n.i.t... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBwriteX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329) schedule_aio_write_and_X: write size (803) too small for minimum aio_write of 0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432) file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [sparse] [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140) real_write_file (tamme7/start menu/programs/prf92.tmp): pos = 0, size = 803, returned 803 [2009/02/25 11:19:10, 3] smbd/reply.c:reply_write_and_X(4121) writeX fnum=11147 num=803 wrote=803 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=20998 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 803 (0x323) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2395 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21056 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8D 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11149) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21056 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2396 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21128 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8E 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11150) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21128 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2397 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=21193 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]=49152 (0xC000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 49152, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=21193 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 04 01 20 0E 05 00 00 00 00 00 00 00 00 00 00 00 .. ..... ........ [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2398 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21250 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8A 2B FC 03 00 00 00 00 7A 00 00 00 00 ....+... ...z.... [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf93.tmp (fnum 11146) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf93.tmp to 122 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 122 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21250 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 84 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x54 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2399 of length 88 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21315 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8B 2B FC 03 00 00 00 00 23 03 00 00 00 ....+... ...#.... [010] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf92.tmp (fnum 11147) info_level=1020 totdata=8 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875) smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf92.tmp to 803 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_size(5025) smb_set_file_size: size: 803 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21315 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 59 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x3b [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2400 of length 63 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=21379 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=11148 (0x2B8C) smb_vwv[ 3]=57344 (0xE000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBreadX (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104) read_file (tamme7/templates/prf8e.tmp): pos = 57344, size = 4096, returned 4096 [2009/02/25 11:19:10, 3] smbd/reply.c:send_file_readX(3312) send_file_readX fnum=11148 max=4096 nread=4096 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=21379 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 01 01 FB 09 02 00 00 00 00 00 00 00 11 00 B5 0F ........ ........ [010] 64 0F 0B 0F B4 0E 5F 0E 10 0E BB 0D 5A 0D FD 0C d....._. ....Z... [020] B4 0C 67 0C 1A 0C CD 0B 82 0B ED 0A 8C 0A 2B 0A ..g..... ......+. [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF ........ ........ [040] FF 00 00 00 00 00 00 00 00 0B F7 0A 80 0A 6D 0A ........ ......m. [050] 5A 0A 47 0A D0 09 BD 09 AA 09 97 02 00 05 00 00 Z.G..... ........ [060] 00 00 1E 00 00 5C 02 10 30 94 D6 13 00 00 02 00 .....\.. 0....... [070] 00 00 02 00 00 9C D6 13 00 39 DB 1F 77 00 00 00 ........ .9..w... [080] 00 00 00 00 00 00 00 00 6F 68 02 03 00 00 00 01 ........ oh...... [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 ........ .......c [0A0] 00 74 00 00 00 00 00 00 00 00 00 4C 00 4C 00 53 .t...... ...L.L.S [0B0] 40 4C 01 00 00 4C 00 D0 A5 AA 02 58 9E AA 02 03 @L...L.. ...X.... [0C0] 00 00 00 FF 00 00 00 00 61 68 02 70 65 68 02 B0 ........ ah.peh.. [0D0] 64 68 02 20 6F 68 02 C0 61 68 02 84 A4 AA 02 84 dh. oh.. ah...... [0E0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [0F0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [100] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [110] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [120] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [130] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [140] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [150] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [160] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [170] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [180] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [190] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [1A0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [1B0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [1C0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [1D0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [1E0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [1F0] A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 A4 AA 02 84 ........ ........ [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 116 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x74 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2401 of length 120 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=21443 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8C 2B EC 03 00 00 00 00 00 00 00 00 00 ....+... ........ [010] 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2setfilepathinfo(6777) call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11148) info_level=1004 totdata=40 [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_dosmode(4990) smb_set_file_dosmode: dosmode: 0x0 [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740) smb_set_file_basic_info: file tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Tue Dec 17 08:48:18 2002 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=21443 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 ... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2402 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=21507 smt_wct=3 smb_vwv[ 0]=11137 (0x2B81) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=31 fnum=11137 (numopen=5) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B12C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d428a0 [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Wed Feb 25 11:17:45 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B12C [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:17:45 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:17:45 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B12C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48b80 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B12C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:17:45 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf91.tmp (numopen=4) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11137 (5 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=21507 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2403 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21570 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 30 00 2E 00 74 00 6D 00 70 00 00 00 .0...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP] -> [tamme7/start menu/programs/prf90.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf90.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21570 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2404 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21635 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 31 00 2E 00 74 00 6D 00 70 00 00 00 .1...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP] -> [tamme7/start menu/programs/prf91.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf91.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21635 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 164 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa4 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2405 of length 168 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=164 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21705 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=19968 (0x4E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=81 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 7E 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C ~\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 64 00 65 00 73 00 6B .a.m.s.\ .d.e.s.k [040] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [050] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/desktop.ini for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21705 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 184 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xb8 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2406 of length 188 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=184 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21763 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=25088 (0x6200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=101 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 49 00 6E 00 74 00 65 .a.m.s.\ .I.n.t.e [040] 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 .r.n.e.t . .E.x.p [050] 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E .l.o.r.e .r...l.n [060] 00 6B 00 00 00 .k... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled internet explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component internet explorer.lnk (len 21) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file internet explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/internet explorer.lnk for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21763 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2407 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=21833 smt_wct=3 smb_vwv[ 0]=11148 (0x2B8C) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=33 fnum=11148 (numopen=1) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d428a0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8e.tmp (numopen=0) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11148 (4 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=21833 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2408 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=21890 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 44 00 2E 00 74 00 6D 00 70 00 00 .f.8.D.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=21890 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 140 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x8c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2409 of length 144 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=140 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21961 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=13824 (0x3600) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4352 (0x1100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=57 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 45 00 2E .s.\.p.r .f.8.E.. [030] 00 74 00 6D 00 70 00 00 00 .t.m.p.. . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Templates/prf8E.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8E.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7055, fnum = 11151 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8e.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x0 access_mask=0x110080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x110080 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d43140 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x110080, open_access_mask = 0x110080 [2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87) check_open_rights: file tamme7/templates/prf8e.tmp requesting 0x110080 returning 0x10000 (NT_STATUS_ACCESS_DENIED) [2009/02/25 11:19:10, 10] smbd/open.c:open_file(439) open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8e.tmp read=No write=No (numopen=5) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109) create_file_unixpath: info=1 [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372) create_file: info=1 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 5] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreate_and_X: fnum = 11151, open name = tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=21961 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=36608 (0x8F00) smb_vwv[ 3]= 299 (0x12B) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=60197 (0xEB25) smb_vwv[ 7]=38983 (0x9847) smb_vwv[ 8]=49829 (0xC2A5) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=47931 (0xBB3B) smb_vwv[11]=10781 (0x2A1D) smb_vwv[12]=51607 (0xC997) smb_vwv[13]= 1 (0x1) smb_vwv[14]=60197 (0xEB25) smb_vwv[15]=38983 (0x9847) smb_vwv[16]=49829 (0xC2A5) smb_vwv[17]= 1 (0x1) smb_vwv[18]=60197 (0xEB25) smb_vwv[19]=38983 (0x9847) smb_vwv[20]=49829 (0xC2A5) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 384 (0x180) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2410 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22018 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 44 00 2E 00 74 00 6D 00 70 00 00 .f.8.D.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22018 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 72 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x48 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2411 of length 76 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22089 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 8F 2B EC 03 ....+.. [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3867) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11151) level=1004 call=7 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22089 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2412 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22146 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 44 00 2E 00 74 00 6D 00 70 00 00 .f.8.D.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22146 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2413 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22210 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 44 00 2E 00 74 00 6D 00 70 00 00 .f.8.D.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22210 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2414 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=22274 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 65 00 78 .l.a.t.e .s.\.e.x [030] 00 63 00 65 00 6C 00 2E 00 78 00 6C 00 73 00 00 .c.e.l.. .x.l.s.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/excel.xls" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL.XLS] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/excel.xls, dirpath = tamme7/templates, start = excel.xls [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file excel.xls [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4037) call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/excel.xls failed (No such file or directory) [2009/02/25 11:19:10, 3] smbd/error.c:reply_unix_error(154) unix_error_packet: error string = No such file or directory [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=22274 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2415 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22338 smt_wct=3 smb_vwv[ 0]=11149 (0x2B8D) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=-1 fnum=11149 (numopen=5) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8d.tmp (numopen=4) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11149 (4 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22338 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 152 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x98 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2416 of length 156 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=152 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22338 smt_wct=1 smb_vwv[ 0]= 22 (0x16) smb_bcc=115 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 04 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 44 00 2E .s.\.p.r .f.8.D.. [030] 00 74 00 6D 00 70 00 00 00 04 00 5C 00 74 00 61 .t.m.p.. ...\.t.a [040] 00 6D 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D .m.m.e.7 .\.T.e.m [050] 00 70 00 6C 00 61 00 74 00 65 00 73 00 5C 00 65 .p.l.a.t .e.s.\.e [060] 00 78 00 63 00 65 00 6C 00 2E 00 78 00 6C 00 73 .x.c.e.l ...x.l.s [070] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBmv (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_mv(6065) reply_mv : tamme7/Templates/prf8D.tmp -> tamme7/Templates/excel.xls [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8D.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/excel.xls" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL.XLS] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/excel.xls, dirpath = tamme7/templates, start = excel.xls [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled excel.xls ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component excel.xls (len 9) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file excel.xls [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5815) rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8d.tmp, newname = tamme7/templates/excel.xls, last_component_dest = excel.xls, is_8_3 = 0 [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7056, fnum = 11152 (5 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8d.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, after mapping access_mask=0x10000 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42e90 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000 [2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87) check_open_rights: file tamme7/templates/prf8d.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED) [2009/02/25 11:19:10, 10] smbd/open.c:open_file(439) open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8d.tmp read=No write=No (numopen=5) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d43f30 [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals_fsp(5650) rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8d.tmp -> tamme7/templates/excel.xls [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8d.tmp [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/excel.xls [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/excel.xls [2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408) rename_open_files: renaming file fnum 11152 (file_id 822:522cab) from tamme7/templates/prf8d.tmp -> tamme7/templates/excel.xls [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AB2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d445b0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AB2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/excel.xls (numopen=4) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11152 (4 used) [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5859) rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8d.tmp -> tamme7/templates/excel.xls [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22338 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2417 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22402 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 46 00 2E 00 74 00 6D 00 70 00 00 .f.8.F.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22402 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2418 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22466 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 46 00 2E 00 74 00 6D 00 70 00 00 .f.8.F.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22466 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2419 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22530 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 46 00 2E 00 74 00 6D 00 70 00 00 .f.8.F.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22530 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2420 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22594 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 46 00 2E 00 74 00 6D 00 70 00 00 .f.8.F.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Mon Mar 31 15:00:00 2003 access: Wed Feb 25 11:19:10 2009 write: Mon Mar 31 15:00:00 2003 change: Mon Mar 31 15:00:00 2003 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22594 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 E0 23 0E 7D F7 C2 01 00 3B BB .......# .}....;. [010] 1D 2A 97 C9 01 00 E0 23 0E 7D F7 C2 01 00 E0 23 .*.....# .}.....# [020] 0E 7D F7 C2 01 80 00 00 00 00 00 00 00 .}...... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 132 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x84 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2421 of length 136 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=132 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=22658 smt_wct=15 smb_vwv[ 0]= 64 (0x40) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 64 (0x40) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=67 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 61 00 6D .l.a.t.e .s.\.a.m [030] 00 69 00 70 00 72 00 6F 00 2E 00 73 00 61 00 6D .i.p.r.o ...s.a.m [040] 00 00 00 ... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/amipro.sam" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/AMIPRO.SAM] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/amipro.sam, dirpath = tamme7/templates, start = amipro.sam [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file amipro.sam [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4037) call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/amipro.sam failed (No such file or directory) [2009/02/25 11:19:10, 3] smbd/error.c:reply_unix_error(154) unix_error_packet: error string = No such file or directory [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=22658 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2422 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22722 smt_wct=3 smb_vwv[ 0]=11150 (0x2B8E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=-1 fnum=11150 (numopen=4) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8f.tmp (numopen=3) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11150 (3 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22722 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 154 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x9a [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2423 of length 158 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=154 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22722 smt_wct=1 smb_vwv[ 0]= 22 (0x16) smb_bcc=117 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 04 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 46 00 2E .s.\.p.r .f.8.F.. [030] 00 74 00 6D 00 70 00 00 00 04 49 5C 00 74 00 61 .t.m.p.. ..I\.t.a [040] 00 6D 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D .m.m.e.7 .\.T.e.m [050] 00 70 00 6C 00 61 00 74 00 65 00 73 00 5C 00 61 .p.l.a.t .e.s.\.a [060] 00 6D 00 69 00 70 00 72 00 6F 00 2E 00 73 00 61 .m.i.p.r .o...s.a [070] 00 6D 00 00 00 .m... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBmv (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_mv(6065) reply_mv : tamme7/Templates/prf8F.tmp -> tamme7/Templates/amipro.sam [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8F.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/amipro.sam" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/AMIPRO.SAM] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/amipro.sam, dirpath = tamme7/templates, start = amipro.sam [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled amipro.sam ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component amipro.sam (len 10) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file amipro.sam [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5815) rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8f.tmp, newname = tamme7/templates/amipro.sam, last_component_dest = amipro.sam, is_8_3 = 0 [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7057, fnum = 11153 (4 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8f.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x10000 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42e90 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000 [2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87) check_open_rights: file tamme7/templates/prf8f.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED) [2009/02/25 11:19:10, 10] smbd/open.c:open_file(439) open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8f.tmp read=No write=No (numopen=4) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d43f30 [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals_fsp(5650) rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8f.tmp -> tamme7/templates/amipro.sam [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8f.tmp [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/amipro.sam [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/amipro.sam [2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408) rename_open_files: renaming file fnum 11153 (file_id 822:522cad) from tamme7/templates/prf8f.tmp -> tamme7/templates/amipro.sam [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AD2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d445b0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AD2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/amipro.sam (numopen=3) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11153 (3 used) [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5859) rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8f.tmp -> tamme7/templates/amipro.sam [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=22722 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 184 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xb8 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2424 of length 188 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=184 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22786 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=25088 (0x6200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=101 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 49 00 6E 00 74 00 65 .a.m.s.\ .I.n.t.e [040] 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 .r.n.e.t . .E.x.p [050] 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E .l.o.r.e .r...l.n [060] 00 6B 00 00 00 .k... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled Internet Explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component Internet Explorer.lnk (len 21) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled internet explorer.lnk ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component internet explorer.lnk (len 21) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file internet explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/internet explorer.lnk for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22786 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 164 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa4 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2425 of length 168 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=164 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22857 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=19968 (0x4E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=81 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 64 00 65 00 73 00 6B .a.m.s.\ .d.e.s.k [040] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [050] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled desktop.ini ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component desktop.ini (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/desktop.ini for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22857 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2426 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22915 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 31 00 2E 00 74 00 6D 00 70 00 00 00 .1...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP] -> [tamme7/start menu/programs/prf91.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf91.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=22915 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2427 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22984 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 45 00 2E 00 74 00 6D 00 70 00 00 .f.8.E.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=22984 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2428 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=23048 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 45 00 2E 00 74 00 6D 00 70 00 00 .f.8.E.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=23048 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2429 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=23112 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 45 00 2E 00 74 00 6D 00 70 00 00 .f.8.E.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=23112 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 130 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x82 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2430 of length 134 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=130 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=23176 smt_wct=15 smb_vwv[ 0]= 62 (0x3E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 62 (0x3E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=65 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 70 00 72 .l.a.t.e .s.\.p.r [030] 00 66 00 38 00 45 00 2E 00 74 00 6D 00 70 00 00 .f.8.E.. .t.m.p.. [040] 00 . [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d41240 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4057) call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2009/02/25 11:19:10, 5] smbd/trans2.c:call_trans2qfilepathinfo(4309) SMB_QFBI - create: Tue Dec 17 08:48:18 2002 access: Wed Feb 25 11:19:10 2009 write: Tue Dec 17 08:48:18 2002 change: Tue Dec 17 08:48:18 2002 mode: 80 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(840) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2009/02/25 11:19:10, 9] smbd/trans2.c:send_trans2_replies(842) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=1772 smb_uid=101 smb_mid=23176 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 00 00 00 25 EB 47 98 A5 C2 01 00 3B BB ......%. G.....;. [010] 1D 2A 97 C9 01 00 25 EB 47 98 A5 C2 01 00 25 EB .*....%. G.....%. [020] 47 98 A5 C2 01 80 00 00 00 00 00 00 00 G....... ..... [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 134 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x86 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2431 of length 138 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=134 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=23240 smt_wct=15 smb_vwv[ 0]= 66 (0x42) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 66 (0x42) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=69 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 61 00 6D ........ .\.t.a.m [010] 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D 00 70 .m.e.7.\ .T.e.m.p [020] 00 6C 00 61 00 74 00 65 00 73 00 5C 00 41 00 43 .l.a.t.e .s.\.A.C [030] 00 43 00 45 00 53 00 53 00 39 00 2E 00 4D 00 44 .C.E.S.S .9...M.D [040] 00 42 00 00 00 .B... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBtrans2 (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_nt_user_token(528) NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514 contains 9 SIDs SID[ 0]: S-1-5-21-2130248414-1056217400-931698689-1514 SID[ 1]: S-1-5-21-2130248414-1056217400-931698689-1122 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-2-96 SID[ 6]: S-1-5-21-2130248414-1056217400-931698689-513 SID[ 7]: S-1-22-2-81 SID[ 8]: S-1-22-2-1021 SE_PRIV 0x20 0x0 0x0 0x0 [2009/02/25 11:19:10, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 257 Primary group is 81 and contains 3 supplementary groups Group[ 0]: 81 Group[ 1]: 96 Group[ 2]: 1021 [2009/02/25 11:19:10, 5] smbd/uid.c:change_to_user(298) change_to_user uid=(0,257) gid=(0,81) [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(3943) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/ACCESS9.MDB" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/ACCESS9.MDB] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/ACCESS9.MDB, dirpath = tamme7/templates, start = ACCESS9.MDB [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled ACCESS9.MDB ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component ACCESS9.MDB (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled ACCESS9.MDB ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component ACCESS9.MDB (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled access9.mdb ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component access9.mdb (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file access9.mdb [2009/02/25 11:19:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(4037) call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/access9.mdb failed (No such file or directory) [2009/02/25 11:19:10, 3] smbd/error.c:reply_unix_error(154) unix_error_packet: error string = No such file or directory [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1772 smb_uid=101 smb_mid=23240 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2432 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23304 smt_wct=3 smb_vwv[ 0]=11151 (0x2B8F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=-1 fnum=11151 (numopen=3) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/prf8e.tmp (numopen=2) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11151 (2 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23304 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 156 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x9c [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2433 of length 160 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=156 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23304 smt_wct=1 smb_vwv[ 0]= 22 (0x16) smb_bcc=119 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 04 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 54 00 65 00 6D 00 70 00 6C 00 61 00 74 00 65 .T.e.m.p .l.a.t.e [020] 00 73 00 5C 00 70 00 72 00 66 00 38 00 45 00 2E .s.\.p.r .f.8.E.. [030] 00 74 00 6D 00 70 00 00 00 04 00 5C 00 74 00 61 .t.m.p.. ...\.t.a [040] 00 6D 00 6D 00 65 00 37 00 5C 00 54 00 65 00 6D .m.m.e.7 .\.T.e.m [050] 00 70 00 6C 00 61 00 74 00 65 00 73 00 5C 00 41 .p.l.a.t .e.s.\.A [060] 00 43 00 43 00 45 00 53 00 53 00 39 00 2E 00 4D .C.C.E.S .S.9...M [070] 00 44 00 42 00 00 00 .D.B... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBmv (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_mv(6065) reply_mv : tamme7/Templates/prf8E.tmp -> tamme7/Templates/ACCESS9.MDB [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/prf8E.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Templates/ACCESS9.MDB" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235) stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/ACCESS9.MDB] [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates] [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(293) unix_convert begin: name = tamme7/templates/ACCESS9.MDB, dirpath = tamme7/templates, start = ACCESS9.MDB [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled ACCESS9.MDB ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component ACCESS9.MDB (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled ACCESS9.MDB ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component ACCESS9.MDB (len 11) ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249) is_mangled access9.mdb ? [2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188) is_mangled_component access9.mdb (len 11) ? [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(543) New file access9.mdb [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5815) rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8e.tmp, newname = tamme7/templates/access9.mdb, last_component_dest = ACCESS9.MDB, is_8_3 = 0 [2009/02/25 11:19:10, 5] smbd/files.c:file_new(121) allocated file structure 7058, fnum = 11154 (3 used) [2009/02/25 11:19:10, 3] smbd/dosmode.c:unix_mode(124) unix_mode(tamme7/templates/prf8e.tmp) returning 0666 [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0 [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576) open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x10000 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42ea0 [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907) delay_for_oplocks: oplock type 0x10 on file [2009/02/25 11:19:10, 4] smbd/open.c:open_file_ntcreate_internal(1835) calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000 [2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87) check_open_rights: file tamme7/templates/prf8e.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED) [2009/02/25 11:19:10, 10] smbd/open.c:open_file(439) open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 2] smbd/open.c:open_file(506) tamme7 opened file tamme7/templates/prf8e.tmp read=No write=No (numopen=3) [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(359) dos_mode: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1876) is_in_path: tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 8] lib/util.c:is_in_path(1900) is_in_path: match not found [2009/02/25 11:19:10, 8] smbd/dosmode.c:dos_mode(399) dos_mode returning [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d43f40 [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals_fsp(5650) rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8e.tmp -> tamme7/templates/access9.mdb [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8e.tmp [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/access9.mdb [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/access9.mdb [2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408) rename_open_files: renaming file fnum 11154 (file_id 822:522cae) from tamme7/templates/prf8e.tmp -> tamme7/templates/access9.mdb [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000AE2C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d445c0 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000AE2C [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/templates/access9.mdb (numopen=2) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11154 (2 used) [2009/02/25 11:19:10, 3] smbd/reply.c:rename_internals(5859) rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8e.tmp -> tamme7/templates/access9.mdb [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23304 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2434 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23368 smt_wct=3 smb_vwv[ 0]=11147 (0x2B8B) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=32 fnum=11147 (numopen=2) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B62C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Wed Feb 25 11:18:04 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B62C [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:18:04 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:04 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B62C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48428 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B62C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:18:04 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf92.tmp (numopen=1) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11147 (1 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23368 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2435 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23432 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 32 00 2E 00 74 00 6D 00 70 00 00 00 .2...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP] -> [tamme7/start menu/programs/prf92.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf92.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23432 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 41 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x29 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2436 of length 45 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23496 smt_wct=3 smb_vwv[ 0]=11146 (0x2B8A) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBclose (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 3] smbd/reply.c:reply_close(4338) close fd=28 fnum=11146 (numopen=1) [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Thu Jan 1 02:59:59 1970 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B52C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d42830 [2009/02/25 11:19:10, 6] smbd/close.c:set_close_write_time(450) close_write_time: Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B52C [2009/02/25 11:19:10, 6] smbd/trans2.c:smb_set_file_time(4912) smb_set_file_time: actime: Wed Feb 25 11:19:10 2009 smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009 smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 2208000000000000B52C [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48428 [2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 2208000000000000B52C [2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955) smb_set_file_time: setting utimes to modified values. [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(580) file_ntime: actime: Wed Feb 25 11:19:10 2009 [2009/02/25 11:19:10, 6] smbd/dosmode.c:file_ntimes(582) file_ntime: modtime: Wed Feb 25 11:18:08 2009 [2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593) notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 2] smbd/close.c:close_normal_file(594) tamme7 closed file tamme7/start menu/programs/prf93.tmp (numopen=0) NT_STATUS_OK [2009/02/25 11:19:10, 5] smbd/files.c:file_free(428) freed files structure 11146 (0 used) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=23496 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2437 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23560 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 33 00 2E 00 74 00 6D 00 70 00 00 00 .3...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP] -> [tamme7/start menu/programs/prf93.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf93.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23560 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2438 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23624 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 32 00 2E 00 74 00 6D 00 70 00 00 00 .2...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP] -> [tamme7/start menu/programs/prf92.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf92.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23624 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/02/25 11:19:10, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0xa0 [2009/02/25 11:19:10, 3] smbd/process.c:process_smb(1554) Transaction 2439 of length 164 (0 toread) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=160 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23683 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=18944 (0x4A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=77 [2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233) [000] 00 5C 00 74 00 61 00 6D 00 6D 00 65 00 37 00 5C .\.t.a.m .m.e.7.\ [010] 00 53 00 74 00 61 00 72 00 74 00 20 00 4D 00 65 .S.t.a.r .t. .M.e [020] 00 6E 00 75 00 5C 00 50 00 72 00 6F 00 67 00 72 .n.u.\.P .r.o.g.r [030] 00 61 00 6D 00 73 00 5C 00 70 00 72 00 66 00 39 .a.m.s.\ .p.r.f.9 [040] 00 33 00 2E 00 74 00 6D 00 70 00 00 00 .3...t.m .p... [2009/02/25 11:19:10, 3] smbd/process.c:switch_message(1378) switch message SMBntcreateX (pid 12929) conn 0xb8d40358 [2009/02/25 11:19:10, 4] smbd/uid.c:change_to_user(213) change_to_user: Skipping user change - already user [2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183) create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp [2009/02/25 11:19:10, 5] smbd/filename.c:unix_convert(146) unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp" [2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274) stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP] -> [tamme7/start menu/programs/prf93.tmp] [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859) create_file_unixpath: open file tamme7/start menu/programs/prf93.tmp for delete ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126) create_file_unixpath: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384) create_file: NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 3] smbd/error.c:error_packet_set(61) error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED [2009/02/25 11:19:10, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:10, 5] lib/util.c:show_msg(655) size=35 smb_com=0xa2 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=101 smb_mid=23683 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:15, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 39 [2009/02/25 11:19:15, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x27 [2009/02/25 11:19:15, 3] smbd/process.c:process_smb(1554) Transaction 2440 of length 43 (0 toread) [2009/02/25 11:19:15, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:15, 5] lib/util.c:show_msg(655) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=23747 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:15, 3] smbd/process.c:switch_message(1378) switch message SMBulogoffX (pid 12929) conn 0x0 [2009/02/25 11:19:15, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:15, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:19:15, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:19:15, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:15, 3] smbd/reply.c:reply_ulogoffX(1972) ulogoffX vuid=100 [2009/02/25 11:19:15, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:15, 5] lib/util.c:show_msg(655) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=23747 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2009/02/25 11:19:15, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 35 [2009/02/25 11:19:15, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x23 [2009/02/25 11:19:15, 3] smbd/process.c:process_smb(1554) Transaction 2441 of length 39 (0 toread) [2009/02/25 11:19:15, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:15, 5] lib/util.c:show_msg(655) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23811 smt_wct=0 smb_bcc=0 [2009/02/25 11:19:15, 3] smbd/process.c:switch_message(1378) switch message SMBtdis (pid 12929) conn 0xb8d24c48 [2009/02/25 11:19:15, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:15, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:19:15, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:19:15, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:15, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:15, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:19:15, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:19:15, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:15, 3] smbd/service.c:close_cnum(1315) kivastik (192.168.5.129) closed connection to service IPC$ [2009/02/25 11:19:15, 3] smbd/connection.c:yield_connection(31) Yielding connection to IPC$ [2009/02/25 11:19:15, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 81320000010000004950 [2009/02/25 11:19:15, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d48a68 [2009/02/25 11:19:15, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 81320000010000004950 [2009/02/25 11:19:15, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:19:15, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:19:15, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:19:15, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:19:15, 5] lib/util.c:show_msg(645) [2009/02/25 11:19:15, 5] lib/util.c:show_msg(655) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23811 smt_wct=0 smb_bcc=0 [2009/02/25 11:20:04, 10] lib/events.c:run_events(240) Running event "smbd_idle_event_handler" b8d3ec58 [2009/02/25 11:20:04, 10] lib/events.c:timed_event_destructor(55) Destroying timed event b8d3ec58 "smbd_idle_event_handler" [2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(592) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(603) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2009/02/25 11:20:04, 10] lib/events.c:_event_add_timed(120) Added timed event "smbd_idle_event_handler": b8d486c0 [2009/02/25 11:20:04, 10] lib/events.c:run_events(240) Running event "smbd_idle_event_handler" b8d3ef08 [2009/02/25 11:20:04, 10] lib/events.c:timed_event_destructor(55) Destroying timed event b8d3ef08 "smbd_idle_event_handler" [2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(592) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2009/02/25 11:20:04, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:04, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:04, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:04, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(603) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2009/02/25 11:20:04, 10] lib/events.c:_event_add_timed(120) Added timed event "smbd_idle_event_handler": b8d30f98 [2009/02/25 11:20:12, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 35 [2009/02/25 11:20:12, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x23 [2009/02/25 11:20:12, 3] smbd/process.c:process_smb(1554) Transaction 2442 of length 39 (0 toread) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(645) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(655) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=23875 smt_wct=0 smb_bcc=0 [2009/02/25 11:20:12, 3] smbd/process.c:switch_message(1378) switch message SMBtdis (pid 12929) conn 0xb8d41240 [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 1] smbd/service.c:close_cnum(1315) kivastik (192.168.5.129) closed connection to service profile [2009/02/25 11:20:12, 3] smbd/connection.c:yield_connection(31) Yielding connection to profile [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 81320000030000007072 [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d3d2f8 [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 81320000030000007072 [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(645) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(655) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=101 smb_mid=23875 smt_wct=0 smb_bcc=0 [2009/02/25 11:20:12, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 39 [2009/02/25 11:20:12, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x27 [2009/02/25 11:20:12, 3] smbd/process.c:process_smb(1554) Transaction 2443 of length 43 (0 toread) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(645) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(655) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=23939 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2009/02/25 11:20:12, 3] smbd/process.c:switch_message(1378) switch message SMBulogoffX (pid 12929) conn 0x0 [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 49442F3400 [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d41240 [2009/02/25 11:20:12, 2] smbd/utmp.c:sys_utmp_update(437) utmp_update: uname:/var/run/utmpx wname:/var/log/wtmpx [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 49442F3400 [2009/02/25 11:20:12, 3] smbd/reply.c:reply_ulogoffX(1972) ulogoffX vuid=101 [2009/02/25 11:20:12, 5] lib/util.c:show_msg(645) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(655) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=23939 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2009/02/25 11:20:12, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 35 [2009/02/25 11:20:12, 6] smbd/process.c:process_smb(1551) got message type 0x0 of len 0x23 [2009/02/25 11:20:12, 3] smbd/process.c:process_smb(1554) Transaction 2444 of length 39 (0 toread) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(645) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(655) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=24003 smt_wct=0 smb_bcc=0 [2009/02/25 11:20:12, 3] smbd/process.c:switch_message(1378) switch message SMBtdis (pid 12929) conn 0xb8d40358 [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 1] smbd/service.c:close_cnum(1315) kivastik (192.168.5.129) closed connection to service profile [2009/02/25 11:20:12, 3] smbd/connection.c:yield_connection(31) Yielding connection to profile [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 81320000020000007072 [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d41c10 [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 81320000020000007072 [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(645) [2009/02/25 11:20:12, 5] lib/util.c:show_msg(655) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=24003 smt_wct=0 smb_bcc=0 [2009/02/25 11:20:12, 5] lib/util_sock.c:read_socket_with_timeout(928) read_socket_with_timeout: blocking read. EOF from client. [2009/02/25 11:20:12, 10] smbd/process.c:receive_smb_raw_talloc(280) receive_smb_raw: NT_STATUS_END_OF_FILE [2009/02/25 11:20:12, 3] smbd/process.c:smbd_process(1930) receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting [2009/02/25 11:20:12, 5] libsmb/namecache.c:namecache_shutdown(81) namecache_shutdown: netbios namecache closed successfully. [2009/02/25 11:20:12, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/25 11:20:12, 5] auth/token_util.c:debug_nt_user_token(522) NT user token: (NULL) [2009/02/25 11:20:12, 5] auth/token_util.c:debug_unix_user_token(548) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2009/02/25 11:20:12, 5] smbd/uid.c:change_to_root_user(313) change_to_root_user: now uid=(0,0) gid=(0,0) [2009/02/25 11:20:12, 3] smbd/connection.c:yield_connection(31) Yielding connection to [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key 81320000FFFFFFFF0000 [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xb8d41c10 [2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key 81320000FFFFFFFF0000 [2009/02/25 11:20:12, 3] smbd/server.c:exit_server_common(960) Server exit (normal exit)