Attachment 3955 Details for Bug 6083 – debug at level 10

debug at level 10

kivastik.txt (text/plain), 862.00 KB, created by Urmas Buhvestov on 2009-02-25 03:31:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Urmas Buhvestov

Created: 2009-02-25 03:31:12 UTC

Size: 862.00 KB

patch

obsolete

>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2250 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=11846
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 43 00 2E  00 74 00 6D 00 70 00 00  .f.8.C.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8C.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8c.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Apr 16 10:36:14 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Apr 16 10:36:14 2003
>   change: Wed Apr 16 10:36:14 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=11846
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 EB B7  DB EA 03 C3 01 00 3B BB  ........ ......;.
>  [010] 1D 2A 97 C9 01 00 EB B7  DB EA 03 C3 01 00 EB B7  .*...... ........
>  [020] DB EA 03 C3 01 80 00 00  00 00 00 00 00           ........ .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 190
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xbe
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2251 of length 194 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=190
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=11904
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=26624 (0x6800)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=107
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 57 00 69 00 6E 00 64  .a.m.s.\ .W.i.n.d
>  [040] 00 6F 00 77 00 73 00 20  00 4D 00 65 00 64 00 69  .o.w.s.  .M.e.d.i
>  [050] 00 61 00 20 00 50 00 6C  00 61 00 79 00 65 00 72  .a. .P.l .a.y.e.r
>  [060] 00 2E 00 6C 00 6E 00 6B  00 00 00                 ...l.n.k ...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Windows Media Player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Windows Media Player.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Windows Media Player.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/WINDOWS MEDIA PLAYER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Windows Media Player.lnk, dirpath = tamme7/start menu/programs, start = Windows Media Player.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Windows Media Player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Windows Media Player.lnk (len 24) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Windows Media Player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Windows Media Player.lnk (len 24) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled windows media player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component windows media player.lnk (len 24) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file windows media player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/windows media player.lnk
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7026, fnum = 11122 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/windows media player.lnk) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/windows media player.lnk, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/windows media player.lnk and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11122 (4 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=11904
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 180
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xb4
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2252 of length 184 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=180
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=11971
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=24064 (0x5E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=97
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 01 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 4F 00 75 00 74 00 6C  .a.m.s.\ .O.u.t.l
>  [040] 00 6F 00 6F 00 6B 00 20  00 45 00 78 00 70 00 72  .o.o.k.  .E.x.p.r
>  [050] 00 65 00 73 00 73 00 2E  00 6C 00 6E 00 6B 00 00  .e.s.s.. .l.n.k..
>  [060] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Outlook Express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Outlook Express.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Outlook Express.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/OUTLOOK EXPRESS.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Outlook Express.lnk, dirpath = tamme7/start menu/programs, start = Outlook Express.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Outlook Express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Outlook Express.lnk (len 19) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Outlook Express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Outlook Express.lnk (len 19) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled outlook express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component outlook express.lnk (len 19) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file outlook express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/outlook express.lnk
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7027, fnum = 11123 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/outlook express.lnk) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/outlook express.lnk, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/outlook express.lnk and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11123 (4 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=11971
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2253 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12039
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 6F 2B EC 03                              ...o+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11119) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12039
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 80 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2254 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=12102
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 43 00 2E  00 74 00 6D 00 70 00 00  .f.8.C.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8C.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8c.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Apr 16 10:36:14 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Apr 16 10:36:14 2003
>   change: Wed Apr 16 10:36:14 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=12102
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 EB B7  DB EA 03 C3 01 00 3B BB  ........ ......;.
>  [010] 1D 2A 97 C9 01 00 EB B7  DB EA 03 C3 01 00 EB B7  .*...... ........
>  [020] DB EA 03 C3 01 80 00 00  00 00 00 00 00           ........ .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2255 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12160
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:18:03 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:18:03 2009
>   change: Wed Feb 25 11:18:03 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12160
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 80 D7 CB  F5 29 97 C9 01 00 3B BB  ........ .)....;.
>  [010] 1D 2A 97 C9 01 80 D7 CB  F5 29 97 C9 01 80 D7 CB  .*...... .)......
>  [020] F5 29 97 C9 01 10 00 00  00 00 00 00 00           .)...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2256 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12231
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 6F 2B FC 03 00  00 00 00 00 16 00 00 00  ...o+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11119) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8d.tmp to 5632
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 5632 smb_set_file_size: file tamme7/templates/prf8d.tmp : setting new size to 5632
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  5] smbd/fileio.c:trigger_write_time_update_immediate(238)
>  Update write time immediate on tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48e68
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12231
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2257 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=12294
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 43 00 2E  00 74 00 6D 00 70 00 00  .f.8.C.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8C.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8c.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Apr 16 10:36:14 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Apr 16 10:36:14 2003
>   change: Wed Apr 16 10:36:14 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=12294
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 EB B7  DB EA 03 C3 01 00 3B BB  ........ ......;.
>  [010] 1D 2A 97 C9 01 00 EB B7  DB EA 03 C3 01 00 EB B7  .*...... ........
>  [020] DB EA 03 C3 01 80 00 00  00 00 00 00 00           ........ .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2258 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12352
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:18:03 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:18:03 2009
>   change: Wed Feb 25 11:18:03 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12352
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 80 D7 CB  F5 29 97 C9 01 00 3B BB  ........ .)....;.
>  [010] 1D 2A 97 C9 01 80 D7 CB  F5 29 97 C9 01 80 D7 CB  .*...... .)......
>  [020] F5 29 97 C9 01 10 00 00  00 00 00 00 00           .)...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 132
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x84
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2259 of length 136 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=132
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=12422
>  smt_wct=15
>  smb_vwv[ 0]=   64 (0x40)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   64 (0x40)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=67
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 45 00 58  .l.a.t.e .s.\.E.X
>  [030] 00 43 00 45 00 4C 00 39  00 2E 00 58 00 4C 00 53  .C.E.L.9 ...X.L.S
>  [040] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/EXCEL9.XLS"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL9.XLS]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/EXCEL9.XLS, dirpath = tamme7/templates, start = EXCEL9.XLS
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled EXCEL9.XLS ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component EXCEL9.XLS (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled EXCEL9.XLS ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component EXCEL9.XLS (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel9.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel9.xls (len 10) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file excel9.xls
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4037)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/excel9.xls failed (No such file or directory)
>[2009/02/25 11:19:10,  3] smbd/error.c:reply_unix_error(154)
>  unix_error_packet: error string = No such file or directory
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=12422
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2260 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12480
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:18:03 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:18:03 2009
>   change: Wed Feb 25 11:18:03 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12480
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 80 D7 CB  F5 29 97 C9 01 00 3B BB  ........ .)....;.
>  [010] 1D 2A 97 C9 01 80 D7 CB  F5 29 97 C9 01 80 D7 CB  .*...... .)......
>  [020] F5 29 97 C9 01 10 00 00  00 00 00 00 00           .)...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2261 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12551
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:18:03 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:18:03 2009
>   change: Wed Feb 25 11:18:03 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12551
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 80 D7 CB  F5 29 97 C9 01 00 3B BB  ........ .)....;.
>  [010] 1D 2A 97 C9 01 80 D7 CB  F5 29 97 C9 01 80 D7 CB  .*...... .)......
>  [020] F5 29 97 C9 01 10 00 00  00 00 00 00 00           .)...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2262 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12608
>  smt_wct=3
>  smb_vwv[ 0]=11108 (0x2B64)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=-1 fnum=11108 (numopen=4)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000A82C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000A82C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8c.tmp (numopen=3) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11108 (3 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12608
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 154
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x9a
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2263 of length 158 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=154
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12608
>  smt_wct=1
>  smb_vwv[ 0]=   22 (0x16)
>  smb_bcc=117
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 04 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 43 00 2E  .s.\.p.r .f.8.C..
>  [030] 00 74 00 6D 00 70 00 00  00 04 98 5C 00 74 00 61  .t.m.p.. ...\.t.a
>  [040] 00 6D 00 6D 00 65 00 37  00 5C 00 54 00 65 00 6D  .m.m.e.7 .\.T.e.m
>  [050] 00 70 00 6C 00 61 00 74  00 65 00 73 00 5C 00 45  .p.l.a.t .e.s.\.E
>  [060] 00 58 00 43 00 45 00 4C  00 39 00 2E 00 58 00 4C  .X.C.E.L .9...X.L
>  [070] 00 53 00 00 00                                    .S... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBmv (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_mv(6065)
>  reply_mv : tamme7/Templates/prf8C.tmp -> tamme7/Templates/EXCEL9.XLS
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8C.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8C.TMP] -> [tamme7/templates/prf8c.tmp]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/EXCEL9.XLS"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL9.XLS]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/EXCEL9.XLS, dirpath = tamme7/templates, start = EXCEL9.XLS
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled EXCEL9.XLS ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component EXCEL9.XLS (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled EXCEL9.XLS ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component EXCEL9.XLS (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel9.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel9.xls (len 10) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file excel9.xls
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5815)
>  rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8c.tmp, newname = tamme7/templates/excel9.xls, last_component_dest = EXCEL9.XLS, is_8_3 = 0
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7028, fnum = 11124 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8c.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8c.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8c.tmp, after mapping access_mask=0x10000
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000A82C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42e90
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000
>[2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87)
>  check_open_rights: file tamme7/templates/prf8c.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED)
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file(439)
>  open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8c.tmp read=No write=No (numopen=4)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000A82C
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000A82C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d43f30
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals_fsp(5650)
>  rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8c.tmp -> tamme7/templates/excel9.xls
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8c.tmp
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/excel9.xls
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/excel9.xls
>[2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408)
>  rename_open_files: renaming file fnum 11124 (file_id 822:522ca8) from tamme7/templates/prf8c.tmp -> tamme7/templates/excel9.xls
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000A82C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000A82C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d445b0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000A82C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/excel9.xls (numopen=3) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11124 (3 used)
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5859)
>  rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8c.tmp -> tamme7/templates/excel9.xls
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12608
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2264 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12679
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 6F 2B EC 03 00  00 00 00 00 00 00 00 00  ...o+... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 E0 23 0E 7D  ........ .....#.}
>  [020] F7 C2 01 50 30 1B C8 29  97 C9 01 00 00 00 00 00  ...P0..) ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11119) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003
>   smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d49070
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Mon Mar 31 15:00:00 2003
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12679
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2265 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12736
>  smt_wct=3
>  smb_vwv[ 0]=11117 (0x2B6D)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=27 fnum=11117 (numopen=3)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8f.tmp (numopen=2) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11117 (2 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12736
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2266 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12807
>  smt_wct=3
>  smb_vwv[ 0]=11118 (0x2B6E)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=28 fnum=11118 (numopen=2)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8e.tmp (numopen=1) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11118 (1 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=12807
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2267 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12864
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 1793 (0x701)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]= 8192 (0x2000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1280 (0x500)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=17408 (0x4400)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 46 00 2E  .s.\.p.r .f.8.F..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Templates/prf8F.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8F.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/PRF8F.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/prf8F.tmp, dirpath = tamme7/templates, start = prf8F.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf8F.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf8F.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf8F.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf8F.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d42b20:size 1a) TAMME7/TEMPLATES/PRF8F.TMP -> tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d42ad0:size 1a) TAMME7/TEMPLATES/PRF8F.TMP -> tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(681)
>  conversion finished tamme7/Templates/prf8F.tmp -> tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7029, fnum = 11125 (2 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8f.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006)
>  open_match_attributes: file tamme7/templates/prf8f.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x7019f
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42cd0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/templates/prf8f.tmp, flags = 0102 mode = 0666, fd = 27. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8f.tmp read=Yes write=Yes (numopen=2)
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8f.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=3
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11125, open name = tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12864
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=29954 (0x7502)
>  smb_vwv[ 3]=  811 (0x32B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 174
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xae
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2268 of length 178 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=174
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12934
>  smt_wct=15
>  smb_vwv[ 0]=  106 (0x6A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  106 (0x6A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=109
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 5C  .r.o.g.r .a.m.s.\
>  [040] 00 49 00 6E 00 74 00 65  00 72 00 6E 00 65 00 74  .I.n.t.e .r.n.e.t
>  [050] 00 20 00 45 00 78 00 70  00 6C 00 6F 00 72 00 65  . .E.x.p .l.o.r.e
>  [060] 00 72 00 2E 00 6C 00 6E  00 6B 00 00 00           .r...l.n .k...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled internet explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component internet explorer.lnk (len 21) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file internet explorer.lnk
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4037)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/start menu/programs/internet explorer.lnk failed (No such file or directory)
>[2009/02/25 11:19:10,  3] smbd/error.c:reply_unix_error(154)
>  unix_error_packet: error string = No such file or directory
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12934
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2269 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12999
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 1793 (0x701)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]= 8192 (0x2000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1280 (0x500)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=17408 (0x4400)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 45 00 2E  .s.\.p.r .f.8.E..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Templates/prf8E.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8E.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/PRF8E.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/prf8E.tmp, dirpath = tamme7/templates, start = prf8E.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf8E.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf8E.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf8E.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf8E.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d42b20:size 1a) TAMME7/TEMPLATES/PRF8E.TMP -> tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d42ad0:size 1a) TAMME7/TEMPLATES/PRF8E.TMP -> tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(681)
>  conversion finished tamme7/Templates/prf8E.tmp -> tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7030, fnum = 11126 (3 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8e.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006)
>  open_match_attributes: file tamme7/templates/prf8e.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x7019f
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42cd0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/templates/prf8e.tmp, flags = 0102 mode = 0666, fd = 28. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8e.tmp read=Yes write=Yes (numopen=3)
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8e.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=3
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11126, open name = tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=12999
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=30210 (0x7602)
>  smb_vwv[ 3]=  811 (0x32B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 154
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x9a
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2270 of length 158 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=154
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13059
>  smt_wct=15
>  smb_vwv[ 0]=   86 (0x56)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   86 (0x56)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=89
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 5C  .r.o.g.r .a.m.s.\
>  [040] 00 64 00 65 00 73 00 6B  00 74 00 6F 00 70 00 2E  .d.e.s.k .t.o.p..
>  [050] 00 69 00 6E 00 69 00 00  00                       .i.n.i.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file desktop.ini
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4037)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/start menu/programs/desktop.ini failed (No such file or directory)
>[2009/02/25 11:19:10,  3] smbd/error.c:reply_unix_error(154)
>  unix_error_packet: error string = No such file or directory
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13059
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 70
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x46
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2271 of length 74 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13120
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 05 01                                    ..... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfsinfo(2592)
>  call_trans2qfsinfo: level = 261
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13120
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   20 (0x14)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   20 (0x14)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=21
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 27 00 01 00 FF 00 00  00 08 00 00 00 4E 00 54  .'...... .....N.T
>  [010] 00 46 00 53 00                                    .F.S. 
>[2009/02/25 11:19:10,  4] smbd/trans2.c:call_trans2qfsinfo(3119)
>  SMBtrans2 info_level = 261
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2272 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13192
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 30 00 2E 00 74 00 6D  00 70 00 00 00           .0...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf90.tmp, dirpath = tamme7/start menu/programs, start = prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf90.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf90.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf90.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf90.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf90.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf90.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7031, fnum = 11127 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf90.tmp and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11127 (3 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13192
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2273 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13257
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 31 00 2E 00 74 00 6D  00 70 00 00 00           .1...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf91.tmp, dirpath = tamme7/start menu/programs, start = prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf91.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf91.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf91.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf91.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf91.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf91.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7032, fnum = 11128 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf91.tmp and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11128 (3 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13257
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2274 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13313
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=14336 (0x3800)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=   96 (0x60)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]=11119 (0x2B6F)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBnttrans (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682)
>  reply_nttrans: state->setup_count = 8
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 60 00 09 00 6F 2B 01 00                           `...o+.. 
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741)
>  call_nt_transact_ioctl: function[0x00090060] FID[0x2B6F] isFSctl[0x01] compfilter[0x00]
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13313
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 184
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xb8
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2275 of length 188 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=184
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13382
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=25088 (0x6200)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=101
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 49 00 6E 00 74 00 65  .a.m.s.\ .I.n.t.e
>  [040] 00 72 00 6E 00 65 00 74  00 20 00 45 00 78 00 70  .r.n.e.t . .E.x.p
>  [050] 00 6C 00 6F 00 72 00 65  00 72 00 2E 00 6C 00 6E  .l.o.r.e .r...l.n
>  [060] 00 6B 00 00 00                                    .k... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled internet explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component internet explorer.lnk (len 21) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file internet explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7033, fnum = 11129 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/internet explorer.lnk) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/internet explorer.lnk, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/internet explorer.lnk and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11129 (3 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13382
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 70
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x46
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2276 of length 74 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13447
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 05 01                                    ..... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfsinfo(2592)
>  call_trans2qfsinfo: level = 261
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13447
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   20 (0x14)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   20 (0x14)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=21
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 27 00 01 00 FF 00 00  00 08 00 00 00 4E 00 54  .'...... .....N.T
>  [010] 00 46 00 53 00                                    .F.S. 
>[2009/02/25 11:19:10,  4] smbd/trans2.c:call_trans2qfsinfo(3119)
>  SMBtrans2 info_level = 261
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 164
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa4
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2277 of length 168 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=164
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13504
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=19968 (0x4E00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=81
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 64 00 65 00 73 00 6B  .a.m.s.\ .d.e.s.k
>  [040] 00 74 00 6F 00 70 00 2E  00 69 00 6E 00 69 00 00  .t.o.p.. .i.n.i..
>  [050] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7034, fnum = 11130 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/desktop.ini) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/desktop.ini, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/desktop.ini and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11130 (3 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=13504
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2278 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13571
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 75 2B EC 03                              ...u+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11125) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13571
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 80 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2279 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13640
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  512 (0x200)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 30 00 2E 00 74 00 6D  00 70 00 00 00           .0...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf90.tmp, dirpath = tamme7/start menu/programs, start = prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf90.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf90.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf90.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf90.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf90.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf90.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7035, fnum = 11131 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, after mapping access_mask=0x20089
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf90.tmp, flags = 0300 mode = 0666, fd = 30. 
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf90.tmp read=Yes write=No (numopen=4)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42bd0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=2
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=2
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11131, open name = tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13640
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=31490 (0x7B02)
>  smb_vwv[ 3]=  555 (0x22B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2280 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13697
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  512 (0x200)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 31 00 2E 00 74 00 6D  00 70 00 00 00           .1...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf91.tmp, dirpath = tamme7/start menu/programs, start = prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf91.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf91.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf91.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf91.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf91.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf91.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7036, fnum = 11132 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, after mapping access_mask=0x20089
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf91.tmp, flags = 0300 mode = 0666, fd = 31. 
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf91.tmp read=Yes write=No (numopen=5)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42bd0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=2
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=2
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11132, open name = tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13697
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=31746 (0x7C02)
>  smb_vwv[ 3]=  555 (0x22B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 5696
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x1640
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2281 of length 5700 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=5696
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=13769
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11119 (0x2B6F)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]= 5632 (0x1600)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=5633
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE D0 CF 11 E0 A1 B1 1A  E1 00 00 00 00 00 00 00  ........ ........
>  [010] 00 00 00 00 00 00 00 00  00 3E 00 03 00 FE FF 09  ........ .>......
>  [020] 00 06 00 00 00 00 00 00  00 00 00 00 00 01 00 00  ........ ........
>  [030] 00 01 00 00 00 00 00 00  00 00 10 00 00 02 00 00  ........ ........
>  [040] 00 01 00 00 00 FE FF FF  FF 00 00 00 00 00 00 00  ........ ........
>  [050] 00 FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [060] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [070] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [080] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [090] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0A0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0B0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0C0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0D0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0E0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0F0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [100] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [110] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [120] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [130] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [140] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [150] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [160] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [170] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [180] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [190] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1A0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1B0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1C0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1D0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1E0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1F0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (5632) too small for minimum aio_write of 0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8d.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/templates/prf8d.tmp): pos = 0, size = 5632, returned 5632
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11119 num=5632 wrote=5632
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=13769
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 5632 (0x1600)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 184
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xb8
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2282 of length 188 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=184
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13831
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=25088 (0x6200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=101
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 49 00 6E 00 74 00 65  .a.m.s.\ .I.n.t.e
>  [040] 00 72 00 6E 00 65 00 74  00 20 00 45 00 78 00 70  .r.n.e.t . .E.x.p
>  [050] 00 6C 00 6F 00 72 00 65  00 72 00 2E 00 6C 00 6E  .l.o.r.e .r...l.n
>  [060] 00 6B 00 00 00                                    .k... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled internet explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component internet explorer.lnk (len 21) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file internet explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7037, fnum = 11133 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/internet explorer.lnk) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/internet explorer.lnk, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/internet explorer.lnk and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11133 (5 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13831
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2283 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13894
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 76 2B EC 03                              ...v+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11126) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13894
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 80 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 164
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa4
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2284 of length 168 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=164
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13952
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=19968 (0x4E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]= 4097 (0x1001)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=81
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 64 00 65 00 73 00 6B  .a.m.s.\ .d.e.s.k
>  [040] 00 74 00 6F 00 70 00 2E  00 69 00 6E 00 69 00 00  .t.o.p.. .i.n.i..
>  [050] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7038, fnum = 11134 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/desktop.ini) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/desktop.ini, dos_attrs=0x0 access_mask=0x100100 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/desktop.ini and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11134 (5 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=13952
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2285 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14019
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 75 2B FC 03 00  00 00 00 DA 11 00 00 00  ...u+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11125) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8f.tmp to 4570
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 4570 smb_set_file_size: file tamme7/templates/prf8f.tmp : setting new size to 4570
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] smbd/fileio.c:trigger_write_time_update_immediate(238)
>  Update write time immediate on tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48fa0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14019
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2286 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14088
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 7B 2B EE 03                              ...{+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf90.tmp (fnum = 11131) level=1006 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14088
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 B0 2C 52  00 22 08 00 00           ......,R ."...
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2287 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14145
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 7C 2B EE 03                              ...|+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf91.tmp (fnum = 11132) level=1006 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14145
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 B1 2C 52  00 22 08 00 00           ......,R ."...
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2288 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14210
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 6F 2B FC 03 00  00 00 00 00 16 00 00 00  ...o+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11119) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8d.tmp to 5632
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 5632 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14210
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2289 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14279
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14279
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 10 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2290 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14342
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 76 2B FC 03 00  00 00 00 00 80 01 00 00  ...v+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11126) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8e.tmp to 98304
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 98304 smb_set_file_size: file tamme7/templates/prf8e.tmp : setting new size to 98304
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] smbd/fileio.c:trigger_write_time_update_immediate(238)
>  Update write time immediate on tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48fa0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14342
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2291 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14403
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 75 2B EC 03 00  00 00 00 00 00 00 00 00  ...u+... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 E0 23 0E 7D  ........ .....#.}
>  [020] F7 C2 01 80 9D 4D C8 29  97 C9 01 00 00 00 00 00  .....M.) ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11125) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003
>   smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48d88
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Mon Mar 31 15:00:00 2003
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14403
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2292 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=14466
>  smt_wct=3
>  smb_vwv[ 0]=11131 (0x2B7B)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=30 fnum=11131 (numopen=5)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B02C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf90.tmp (numopen=4) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11131 (4 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=14466
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2293 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=14534
>  smt_wct=3
>  smb_vwv[ 0]=11132 (0x2B7C)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=31 fnum=11132 (numopen=4)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B12C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf91.tmp (numopen=3) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11132 (3 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=14534
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2294 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14595
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 65 00 78  00 63 00 65 00 6C 00 2E  .s.\.e.x .c.e.l..
>  [030] 00 78 00 6C 00 73 00 00  00                       .x.l.s.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Templates/excel.xls
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/excel.xls
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/excel.xls"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL.XLS]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/excel.xls, dirpath = tamme7/templates, start = excel.xls
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file excel.xls
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/excel.xls
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7039, fnum = 11135 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/excel.xls) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/excel.xls, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/templates/excel.xls and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11135 (3 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14595
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2295 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14663
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14663
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 10 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2296 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14722
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 1793 (0x701)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]= 8192 (0x2000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1280 (0x500)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=17408 (0x4400)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 30 00 2E 00 74 00 6D  00 70 00 00 00           .0...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d42960:size 24) TAMME7/START MENU/PROGRAMS/PRF90.TMP -> tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(287)
>  conversion finished tamme7/Start Menu/Programs/prf90.tmp -> tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7040, fnum = 11136 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006)
>  open_match_attributes: file tamme7/start menu/programs/prf90.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf90.tmp, after mapping access_mask=0x7019f
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42b90
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf90.tmp, flags = 0102 mode = 0666, fd = 30. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf90.tmp read=Yes write=Yes (numopen=4)
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=3
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11136, open name = tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14722
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=32770 (0x8002)
>  smb_vwv[ 3]=  811 (0x32B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2297 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14790
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 1793 (0x701)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]= 8192 (0x2000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1280 (0x500)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=17408 (0x4400)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 31 00 2E 00 74 00 6D  00 70 00 00 00           .1...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d42960:size 24) TAMME7/START MENU/PROGRAMS/PRF91.TMP -> tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(287)
>  conversion finished tamme7/Start Menu/Programs/prf91.tmp -> tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7041, fnum = 11137 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006)
>  open_match_attributes: file tamme7/start menu/programs/prf91.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf91.tmp, after mapping access_mask=0x7019f
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42b90
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf91.tmp, flags = 0102 mode = 0666, fd = 31. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf91.tmp read=Yes write=Yes (numopen=5)
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=3
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11137, open name = tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14790
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=33026 (0x8102)
>  smb_vwv[ 3]=  811 (0x32B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2298 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14851
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 76 2B EC 03 00  00 00 00 00 00 00 00 00  ...v+... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 25 EB 47 98  ........ ....%.G.
>  [020] A5 C2 01 40 CC F4 CB 29  97 C9 01 00 00 00 00 00  ...@...) ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11126) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Tue Dec 17 08:48:18 2002
>   smb_set_file_time: setting pending modtime to Tue Dec 17 08:48:18 2002
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48178
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Tue Dec 17 08:48:18 2002
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14851
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2299 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=14919
>  smt_wct=3
>  smb_vwv[ 0]=11119 (0x2B6F)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=29 fnum=11119 (numopen=5)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Mon Mar 31 15:00:00 2003
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003
>   smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d481e0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Mon Mar 31 15:00:00 2003
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8d.tmp (numopen=4) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11119 (4 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=14919
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2300 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14977
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=14336 (0x3800)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=   96 (0x60)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]=11125 (0x2B75)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBnttrans (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682)
>  reply_nttrans: state->setup_count = 8
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 60 00 09 00 75 2B 01 00                           `...u+.. 
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741)
>  call_nt_transact_ioctl: function[0x00090060] FID[0x2B75] isFSctl[0x01] compfilter[0x00]
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=14977
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2301 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15048
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15048
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 10 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 70
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x46
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2302 of length 74 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15106
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 05 01                                    ..... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfsinfo(2592)
>  call_trans2qfsinfo: level = 261
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15106
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   20 (0x14)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   20 (0x14)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=21
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 27 00 01 00 FF 00 00  00 08 00 00 00 4E 00 54  .'...... .....N.T
>  [010] 00 46 00 53 00                                    .F.S. 
>[2009/02/25 11:19:10,  4] smbd/trans2.c:call_trans2qfsinfo(3119)
>  SMBtrans2 info_level = 261
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 70
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x46
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2303 of length 74 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15174
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 05 01                                    ..... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfsinfo(2592)
>  call_trans2qfsinfo: level = 261
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15174
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   20 (0x14)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   20 (0x14)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=21
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 27 00 01 00 FF 00 00  00 08 00 00 00 4E 00 54  .'...... .....N.T
>  [010] 00 46 00 53 00                                    .F.S. 
>[2009/02/25 11:19:10,  4] smbd/trans2.c:call_trans2qfsinfo(3119)
>  SMBtrans2 info_level = 261
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2304 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15235
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=14336 (0x3800)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=   96 (0x60)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]=11126 (0x2B76)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBnttrans (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682)
>  reply_nttrans: state->setup_count = 8
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 60 00 09 00 76 2B 01 00                           `...v+.. 
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741)
>  call_nt_transact_ioctl: function[0x00090060] FID[0x2B76] isFSctl[0x01] compfilter[0x00]
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15235
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2305 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15303
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 44 00 2E  .s.\.p.r .f.8.D..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Templates/prf8D.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8D.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7042, fnum = 11138 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8d.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, after mapping access_mask=0x20189
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42b20
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x20189, open_access_mask = 0x20189
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/templates/prf8d.tmp, flags = 00 mode = 0666, fd = 29. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8d.tmp read=Yes write=No (numopen=1)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=1
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=1
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11138, open name = tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15303
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=33282 (0x8202)
>  smb_vwv[ 3]=  299 (0x12B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 9184 (0x23E0)
>  smb_vwv[ 7]=32014 (0x7D0E)
>  smb_vwv[ 8]=49911 (0xC2F7)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 9184 (0x23E0)
>  smb_vwv[15]=32014 (0x7D0E)
>  smb_vwv[16]=49911 (0xC2F7)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 9184 (0x23E0)
>  smb_vwv[19]=32014 (0x7D0E)
>  smb_vwv[20]=49911 (0xC2F7)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=   22 (0x16)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 4634
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x121a
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2306 of length 4638 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4634
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15361
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11125 (0x2B75)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]= 4570 (0x11DA)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=4571
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE 5B 76 65 72 5D 0D 0A  09 34 0D 0A 5B 73 74 79  .[ver].. .4..[sty
>  [010] 5D 0D 0A 09 0D 0A 5B 66  69 6C 65 73 5D 0D 0A 5B  ].....[f iles]..[
>  [020] 63 68 61 72 73 65 74 5D  0D 0A 09 38 32 0D 0A 09  charset] ...82...
>  [030] 41 4E 53 49 20 28 57 69  6E 64 6F 77 73 2C 20 49  ANSI (Wi ndows, I
>  [040] 42 4D 20 43 50 20 31 32  35 32 29 0D 0A 5B 72 65  BM CP 12 52)..[re
>  [050] 76 69 73 69 6F 6E 73 5D  0D 0A 09 30 0D 0A 5B 70  visions] ...0..[p
>  [060] 72 6E 5D 0D 0A 09 48 50  20 4C 61 73 65 72 4A 65  rn]...HP  LaserJe
>  [070] 74 20 49 49 49 53 69 20  50 6F 73 74 53 63 72 69  t IIISi  PostScri
>  [080] 70 74 0D 0A 5B 70 6F 72  74 5D 0D 0A 09 5C 5C 50  pt..[por t]...\\P
>  [090] 68 6F 65 6E 69 78 5C 68  70 6C 6A 73 69 0D 0A 5B  hoenix\h pljsi..[
>  [0A0] 6C 61 6E 67 5D 0D 0A 09  31 0D 0A 5B 66 6C 64 6E  lang]... 1..[fldn
>  [0B0] 61 6D 65 73 5D 0D 0A 09  46 69 65 6C 64 31 0D 0A  ames]... Field1..
>  [0C0] 09 46 69 65 6C 64 32 0D  0A 09 46 69 65 6C 64 33  .Field2. ..Field3
>  [0D0] 0D 0A 09 46 69 65 6C 64  34 0D 0A 09 46 69 65 6C  ...Field 4...Fiel
>  [0E0] 64 35 0D 0A 09 46 69 65  6C 64 36 0D 0A 09 46 69  d5...Fie ld6...Fi
>  [0F0] 65 6C 64 37 0D 0A 09 46  69 65 6C 64 38 0D 0A 5B  eld7...F ield8..[
>  [100] 64 65 73 63 5D 0D 0A 09  0D 0A 09 0D 0A 09 0D 0A  desc]... ........
>  [110] 09 0D 0A 09 0D 0A 09 37  38 37 33 37 31 34 33 36  .......7 87371436
>  [120] 0D 0A 09 31 0D 0A 09 37  38 37 33 37 31 34 31 31  ...1...7 87371411
>  [130] 0D 0A 09 30 0D 0A 09 31  0D 0A 09 30 0D 0A 09 30  ...0...1 ...0...0
>  [140] 0D 0A 09 30 0D 0A 09 30  0D 0A 09 0D 0A 09 0D 0A  ...0...0 ........
>  [150] 09 0D 0A 09 0D 0A 09 0D  0A 09 0D 0A 09 31 0D 0A  ........ .....1..
>  [160] 5B 66 6F 70 74 73 5D 0D  0A 09 30 0D 0A 09 31 0D  [fopts]. ..0...1.
>  [170] 0A 09 30 0D 0A 09 30 0D  0A 09 0D 0A 09 0D 0A 5B  ..0...0. .......[
>  [180] 6C 6E 6F 70 74 73 5D 0D  0A 09 32 0D 0A 09 42 6F  lnopts]. ..2...Bo
>  [190] 64 79 20 54 65 78 74 0D  0A 09 31 0D 0A 5B 64 6F  dy Text. ..1..[do
>  [1A0] 63 6F 70 74 73 5D 0D 0A  09 35 0D 0A 09 32 0D 0A  copts].. .5...2..
>  [1B0] 5B 47 72 61 6D 53 74 79  6C 65 5D 0D 0A 09 0D 0A  [GramSty le].....
>  [1C0] 5B 74 61 67 5D 0D 0A 09  42 6F 64 79 20 54 65 78  [tag]... Body Tex
>  [1D0] 74 0D 0A 09 32 0D 0A 09  5B 66 6E 74 5D 0D 0A 09  t...2... [fnt]...
>  [1E0] 09 54 69 6D 65 73 20 4E  65 77 20 52 6F 6D 61 6E  .Times N ew Roman
>  [1F0] 0D 0A 09 09 32 34 30 0D  0A 09 09 30 0D 0A 09 09  ....240. ...0....
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (4570) too small for minimum aio_write of 0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8f.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/templates/prf8f.tmp): pos = 0, size = 4570, returned 4570
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11125 num=4570 wrote=4570
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15361
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 4570 (0x11DA)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2307 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15432
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 53 00 74 00 61 00 72  .m.e.7.\ .S.t.a.r
>  [020] 00 74 00 20 00 4D 00 65  00 6E 00 75 00 5C 00 50  .t. .M.e .n.u.\.P
>  [030] 00 72 00 6F 00 67 00 72  00 61 00 6D 00 73 00 00  .r.o.g.r .a.m.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning d
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning d
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 10
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15432
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 10 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2308 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15490
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 80 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf90.tmp (fnum = 11136) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15490
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 80 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2309 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15558
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 81 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf91.tmp (fnum = 11137) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15558
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 80 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 65600
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x10040
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2310 of length 65604 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=65600
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15619
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11126 (0x2B76)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=1
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (65536) too small for minimum aio_write of 0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8e.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/templates/prf8e.tmp): pos = 0, size = 65536, returned 65536
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11126 num=65536 wrote=65536
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15619
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2311 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15687
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=  104 (0x68)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 82 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15687
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2312 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15744
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 75 2B FC 03 00  00 00 00 DA 11 00 00 00  ...u+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11125) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8f.tmp to 4570
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 4570 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15744
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2313 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15814
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 33 00 2E 00 74 00 6D  00 70 00 00 00           .3...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf93.tmp, dirpath = tamme7/start menu/programs, start = prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf93.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf93.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf93.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf93.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf93.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf93.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7043, fnum = 11139 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf93.tmp and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11139 (5 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15814
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2314 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15874
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 32 00 2E 00 74 00 6D  00 70 00 00 00           .2...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf92.tmp, dirpath = tamme7/start menu/programs, start = prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf92.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf92.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf92.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf92.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf92.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf92.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7044, fnum = 11140 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/start menu/programs/prf92.tmp and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11140 (5 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=15874
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2315 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15944
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 80 2B FC 03 00  00 00 00 E2 02 00 00 00  ....+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf90.tmp (fnum 11136) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf90.tmp to 738
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 738 smb_set_file_size: file tamme7/start menu/programs/prf90.tmp : setting new size to 738
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/fileio.c:trigger_write_time_update_immediate(238)
>  Update write time immediate on tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48178
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=15944
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2316 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16001
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 81 2B FC 03 00  00 00 00 14 03 00 00 00  ....+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf91.tmp (fnum 11137) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf91.tmp to 788
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 788 smb_set_file_size: file tamme7/start menu/programs/prf91.tmp : setting new size to 788
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/fileio.c:trigger_write_time_update_immediate(238)
>  Update write time immediate on tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48f90
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16001
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 32832
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8040
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2317 of length 32836 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=32832
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=16071
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11126 (0x2B76)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=32768 (0x8000)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=32769
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE 01 01 1D 0F 00 00 00  00 00 00 00 00 03 00 BB  ........ ........
>  [010] 0F 76 0F 31 0F 00 00 00  00 00 00 00 00 00 00 00  .v.1.... ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [040] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [050] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [060] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [070] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [080] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [090] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [100] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [110] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [120] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [130] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [140] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [150] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [160] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [170] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [180] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [190] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (32768) too small for minimum aio_write of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/templates/prf8e.tmp): pos = 65536, size = 32768, returned 32768
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11126 num=32768 wrote=32768
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=16071
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=32768 (0x8000)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2318 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=16131
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 82 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=16131
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 142
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8e
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2319 of length 146 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=142
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16198
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=14336 (0x3800)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=59
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 61 00 6D  00 69 00 70 00 72 00 6F  .s.\.a.m .i.p.r.o
>  [030] 00 2E 00 73 00 61 00 6D  00 00 00                 ...s.a.m ...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Templates/amipro.sam
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/amipro.sam
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/amipro.sam"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/AMIPRO.SAM]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/amipro.sam, dirpath = tamme7/templates, start = amipro.sam
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file amipro.sam
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/amipro.sam
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7045, fnum = 11141 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/amipro.sam) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/amipro.sam, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/templates/amipro.sam and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11141 (5 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16198
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2320 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16258
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  512 (0x200)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 33 00 2E 00 74 00 6D  00 70 00 00 00           .3...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf93.tmp, dirpath = tamme7/start menu/programs, start = prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf93.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf93.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf93.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf93.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf93.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf93.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7046, fnum = 11142 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, after mapping access_mask=0x20089
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf93.tmp, flags = 0300 mode = 0666, fd = 32. 
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf93.tmp read=Yes write=No (numopen=5)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42bd0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=2
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=2
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11142, open name = tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16258
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=34306 (0x8602)
>  smb_vwv[ 3]=  555 (0x22B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2321 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16321
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  512 (0x200)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 32 00 2E 00 74 00 6D  00 70 00 00 00           .2...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/prf92.tmp, dirpath = tamme7/start menu/programs, start = prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf92.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf92.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf92.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf92.tmp (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled prf92.tmp ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component prf92.tmp (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x2 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7047, fnum = 11143 (7 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, dos_attrs=0x80 access_mask=0x20089 share_access=0x0 create_disposition = 0x2 create_options=0x40 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, after mapping access_mask=0x20089
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0xC0 mode=0666, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf92.tmp, flags = 0300 mode = 0666, fd = 33. 
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x1, filter=0x1, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf92.tmp read=Yes write=No (numopen=6)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42bd0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=2
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=2
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11143, open name = tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16321
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=34562 (0x8702)
>  smb_vwv[ 3]=  555 (0x22B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2322 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16392
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 80 2B EC 03 00  00 00 00 00 00 00 00 00  ....+... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 B0 FF 89 F8 29  ........ .......)
>  [020] 97 C9 01 B0 FF 89 F8 29  97 C9 01 00 00 00 00 00  .......) ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf90.tmp (fnum 11136) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48c58
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:18:08 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16392
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2323 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16448
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 81 2B EC 03 00  00 00 00 00 00 00 00 00  ....+... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 90 97 D8 EA 29  ........ .......)
>  [020] 97 C9 01 90 97 D8 EA 29  97 C9 01 00 00 00 00 00  .......) ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf91.tmp (fnum 11137) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:17:45 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:17:45 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48c58
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:17:45 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16448
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2324 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16515
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 76 2B FC 03 00  00 00 00 00 80 01 00 00  ...v+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11126) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/templates/prf8e.tmp to 98304
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 98304 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16515
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2325 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=16583
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 82 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=16583
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2326 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=16646
>  smt_wct=3
>  smb_vwv[ 0]=11125 (0x2B75)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=27 fnum=11125 (numopen=6)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d428a0
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Mon Mar 31 15:00:00 2003
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003
>   smb_set_file_time: setting pending modtime to Mon Mar 31 15:00:00 2003
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48c58
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Mon Mar 31 15:00:00 2003
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8f.tmp (numopen=5) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11125 (6 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=16646
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2327 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16706
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 86 2B EE 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf93.tmp (fnum = 11142) level=1006 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16706
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 B5 2C 52  00 22 08 00 00           ......,R ."...
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2328 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16769
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 87 2B EE 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf92.tmp (fnum = 11143) level=1006 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4425)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16769
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 B6 2C 52  00 22 08 00 00           ......,R ."...
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2329 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16840
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=14336 (0x3800)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=   96 (0x60)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]=11136 (0x2B80)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBnttrans (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682)
>  reply_nttrans: state->setup_count = 8
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 60 00 09 00 80 2B 01 00                           `....+.. 
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741)
>  call_nt_transact_ioctl: function[0x00090060] FID[0x2B80] isFSctl[0x01] compfilter[0x00]
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16840
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2330 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16896
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=14336 (0x3800)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=   96 (0x60)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]=11137 (0x2B81)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBnttrans (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682)
>  reply_nttrans: state->setup_count = 8
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 60 00 09 00 81 2B 01 00                           `....+.. 
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741)
>  call_nt_transact_ioctl: function[0x00090060] FID[0x2B81] isFSctl[0x01] compfilter[0x00]
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16896
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 144
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x90
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2331 of length 148 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=144
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16963
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=14848 (0x3A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=61
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 41 00 43  00 43 00 45 00 53 00 53  .s.\.A.C .C.E.S.S
>  [030] 00 39 00 2E 00 4D 00 44  00 42 00 00 00           .9...M.D .B...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Templates/ACCESS9.MDB
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/ACCESS9.MDB
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/ACCESS9.MDB"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/ACCESS9.MDB]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/ACCESS9.MDB, dirpath = tamme7/templates, start = ACCESS9.MDB
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled ACCESS9.MDB ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component ACCESS9.MDB (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled ACCESS9.MDB ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component ACCESS9.MDB (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled access9.mdb ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component access9.mdb (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file access9.mdb
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/access9.mdb
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7048, fnum = 11144 (7 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/access9.mdb) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/access9.mdb, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(1492)
>  open_file_ntcreate: FILE_OPEN requested for file tamme7/templates/access9.mdb and file doesn't exist.
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11144 (6 used)
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=16963
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2332 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17031
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 44 00 2E  00 74 00 6D 00 70 00 00  .f.8.D.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17031
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2333 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17094
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 46 00 2E  .s.\.p.r .f.8.F..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Templates/prf8F.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8F.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7049, fnum = 11145 (7 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8f.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x20189
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42ab0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x20189, open_access_mask = 0x20189
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/templates/prf8f.tmp, flags = 00 mode = 0666, fd = 27. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8f.tmp read=Yes write=No (numopen=2)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=1
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=1
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11145, open name = tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17094
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=35074 (0x8902)
>  smb_vwv[ 3]=  299 (0x12B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 9184 (0x23E0)
>  smb_vwv[ 7]=32014 (0x7D0E)
>  smb_vwv[ 8]=49911 (0xC2F7)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 9184 (0x23E0)
>  smb_vwv[15]=32014 (0x7D0E)
>  smb_vwv[16]=49911 (0xC2F7)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 9184 (0x23E0)
>  smb_vwv[19]=32014 (0x7D0E)
>  smb_vwv[20]=49911 (0xC2F7)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=55808 (0xDA00)
>  smb_vwv[28]=   17 (0x11)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2334 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17160
>  smt_wct=3
>  smb_vwv[ 0]=11142 (0x2B86)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=32 fnum=11142 (numopen=5)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d428a0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B52C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf93.tmp (numopen=4) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11142 (6 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17160
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2335 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17216
>  smt_wct=3
>  smb_vwv[ 0]=11143 (0x2B87)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=33 fnum=11143 (numopen=4)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B62C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf92.tmp (numopen=3) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11143 (5 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17216
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2336 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17283
>  smt_wct=3
>  smb_vwv[ 0]=11126 (0x2B76)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=28 fnum=11126 (numopen=3)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Tue Dec 17 08:48:18 2002
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Tue Dec 17 08:48:18 2002
>   smb_set_file_time: setting pending modtime to Tue Dec 17 08:48:18 2002
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d486c0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Tue Dec 17 08:48:18 2002
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8e.tmp (numopen=2) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11126 (4 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17283
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 802
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x322
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2337 of length 806 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=802
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17351
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11136 (0x2B80)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  738 (0x2E2)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=739
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE 4C 00 00 00 01 14 02  00 00 00 00 00 C0 00 00  .L...... ........
>  [010] 00 00 00 00 46 9F 00 00  00 20 00 00 00 00 0B C8  ....F... . ......
>  [020] 6B 84 E1 C2 01 00 71 D5  EC 29 97 C9 01 00 D7 C5  k.....q. .)......
>  [030] C9 A4 79 C4 01 00 EC 00  00 00 00 00 00 01 00 00  ..y..... ........
>  [040] 00 00 00 00 00 00 00 00  00 00 00 00 00 09 01 14  ........ ........
>  [050] 00 1F 50 E0 4F D0 20 EA  3A 69 10 A2 D8 08 00 2B  ..P.O. . :i.....+
>  [060] 30 30 9D 19 00 2F 43 3A  5C 00 00 00 00 00 00 00  00.../C: \.......
>  [070] 00 00 00 00 00 00 00 00  00 00 00 00 4A 00 31 00  ........ ....J.1.
>  [080] 00 00 00 00 3E 3A B1 3A  30 00 50 52 4F 47 52 41  ....>:.: 0.PROGRA
>  [090] 7E 31 00 00 32 00 03 00  04 00 EF BE 4F 2B 59 62  ~1..2... ....O+Yb
>  [0A0] 59 3A AD 49 14 00 00 00  50 00 72 00 6F 00 67 00  Y:.I.... P.r.o.g.
>  [0B0] 72 00 61 00 6D 00 20 00  46 00 69 00 6C 00 65 00  r.a.m. . F.i.l.e.
>  [0C0] 73 00 00 00 18 00 4E 00  31 00 00 00 00 00 08 37  s.....N. 1......7
>  [0D0] 00 92 10 00 4F 55 54 4C  4F 4F 7E 31 00 00 36 00  ....OUTL OO~1..6.
>  [0E0] 03 00 04 00 EF BE 4F 2B  79 9B 59 3A 31 4A 14 00  ......O+ y.Y:1J..
>  [0F0] 00 00 4F 00 75 00 74 00  6C 00 6F 00 6F 00 6B 00  ..O.u.t. l.o.o.k.
>  [100] 20 00 45 00 78 00 70 00  72 00 65 00 73 00 73 00   .E.x.p. r.e.s.s.
>  [110] 00 00 18 00 42 00 32 00  00 EC 00 00 03 31 1B AF  ....B.2. .....1..
>  [120] 20 00 6D 73 69 6D 6E 2E  65 78 65 00 2A 00 03 00   .msimn. exe.*...
>  [130] 04 00 EF BE 63 2E 29 67  59 3A 33 4A 14 00 00 00  ....c.)g Y:3J....
>  [140] 6D 00 73 00 69 00 6D 00  6E 00 2E 00 65 00 78 00  m.s.i.m. n...e.x.
>  [150] 65 00 00 00 18 00 00 00  59 00 00 00 1C 00 00 00  e....... Y.......
>  [160] 01 00 00 00 1C 00 00 00  2D 00 00 00 00 00 00 00  ........ -.......
>  [170] 58 00 00 00 11 00 00 00  03 00 00 00 31 AD CB 30  X....... ....1..0
>  [180] 10 00 00 00 00 43 3A 5C  50 72 6F 67 72 61 6D 20  .....C:\ Program 
>  [190] 46 69 6C 65 73 5C 4F 75  74 6C 6F 6F 6B 20 45 78  Files\Ou tlook Ex
>  [1A0] 70 72 65 73 73 5C 6D 73  69 6D 6E 2E 65 78 65 00  press\ms imn.exe.
>  [1B0] 00 14 00 40 00 78 00 70  00 73 00 70 00 31 00 72  ...@.x.p .s.p.1.r
>  [1C0] 00 65 00 73 00 2E 00 64  00 6C 00 6C 00 2C 00 2D  .e.s...d .l.l.,.-
>  [1D0] 00 31 00 31 00 30 00 30  00 35 00 33 00 2E 00 2E  .1.1.0.0 .5.3....
>  [1E0] 00 5C 00 2E 00 2E 00 5C  00 2E 00 2E 00 5C 00 2E  .\.....\ .....\..
>  [1F0] 00 2E 00 5C 00 50 00 72  00 6F 00 67 00 72 00 61  ...\.P.r .o.g.r.a
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (738) too small for minimum aio_write of 0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf90.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/start menu/programs/prf90.tmp): pos = 0, size = 738, returned 738
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11136 num=738 wrote=738
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17351
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=  738 (0x2E2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 852
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x354
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2338 of length 856 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=852
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17409
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11137 (0x2B81)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  788 (0x314)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=789
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE 4C 00 00 00 01 14 02  00 00 00 00 00 C0 00 00  .L...... ........
>  [010] 00 00 00 00 46 AF 00 00  00 20 00 00 00 00 1F 57  ....F... . .....W
>  [020] 7E 23 00 C3 01 E0 B5 36  E8 29 97 C9 01 00 CE 4A  ~#.....6 .).....J
>  [030] 15 EE F2 C6 01 00 FA 00  00 00 00 00 00 01 00 00  ........ ........
>  [040] 00 00 00 00 00 00 00 00  00 00 00 00 00 1D 01 14  ........ ........
>  [050] 00 1F 50 E0 4F D0 20 EA  3A 69 10 A2 D8 08 00 2B  ..P.O. . :i.....+
>  [060] 30 30 9D 19 00 2F 43 3A  5C 00 00 00 00 00 00 00  00.../C: \.......
>  [070] 00 00 00 00 00 00 00 00  00 00 00 00 4A 00 31 00  ........ ....J.1.
>  [080] 00 00 00 00 3E 3A B1 3A  30 00 50 52 4F 47 52 41  ....>:.: 0.PROGRA
>  [090] 7E 31 00 00 32 00 03 00  04 00 EF BE 4F 2B 59 62  ~1..2... ....O+Yb
>  [0A0] 59 3A AD 49 14 00 00 00  50 00 72 00 6F 00 67 00  Y:.I.... P.r.o.g.
>  [0B0] 72 00 61 00 6D 00 20 00  46 00 69 00 6C 00 65 00  r.a.m. . F.i.l.e.
>  [0C0] 73 00 00 00 18 00 58 00  31 00 00 00 00 00 25 3A  s.....X. 1.....%:
>  [0D0] 0E 51 10 00 57 49 4E 44  4F 57 7E 33 00 00 40 00  .Q..WIND OW~3..@.
>  [0E0] 03 00 04 00 EF BE 4F 2B  7D 9B 58 3A 0C A5 14 00  ......O+ }.X:....
>  [0F0] 00 00 57 00 69 00 6E 00  64 00 6F 00 77 00 73 00  ..W.i.n. d.o.w.s.
>  [100] 20 00 4D 00 65 00 64 00  69 00 61 00 20 00 50 00   .M.e.d. i.a. .P.
>  [110] 6C 00 61 00 79 00 65 00  72 00 00 00 18 00 4C 00  l.a.y.e. r.....L.
>  [120] 32 00 00 FA 00 00 52 35  CA 9D 20 00 77 6D 70 6C  2.....R5 .. .wmpl
>  [130] 61 79 65 72 2E 65 78 65  00 00 30 00 03 00 04 00  ayer.exe ..0.....
>  [140] EF BE 8B 2E 71 61 59 3A  34 4A 14 00 00 00 77 00  ....qaY: 4J....w.
>  [150] 6D 00 70 00 6C 00 61 00  79 00 65 00 72 00 2E 00  m.p.l.a. y.e.r...
>  [160] 65 00 78 00 65 00 00 00  1C 00 00 00 61 00 00 00  e.x.e... ....a...
>  [170] 1C 00 00 00 01 00 00 00  1C 00 00 00 2D 00 00 00  ........ ....-...
>  [180] 00 00 00 00 60 00 00 00  11 00 00 00 03 00 00 00  ....`... ........
>  [190] 31 AD CB 30 10 00 00 00  00 43 3A 5C 50 72 6F 67  1..0.... .C:\Prog
>  [1A0] 72 61 6D 20 46 69 6C 65  73 5C 57 69 6E 64 6F 77  ram File s\Window
>  [1B0] 73 20 4D 65 64 69 61 20  50 6C 61 79 65 72 5C 77  s Media  Player\w
>  [1C0] 6D 70 6C 61 79 65 72 2E  65 78 65 00 00 21 00 40  mplayer. exe..!.@
>  [1D0] 00 43 00 3A 00 5C 00 57  00 49 00 4E 00 44 00 4F  .C.:.\.W .I.N.D.O
>  [1E0] 00 57 00 53 00 5C 00 69  00 6E 00 66 00 5C 00 75  .W.S.\.i .n.f.\.u
>  [1F0] 00 6E 00 72 00 65 00 67  00 6D 00 70 00 32 00 2E  .n.r.e.g .m.p.2..
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (788) too small for minimum aio_write of 0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf91.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/start menu/programs/prf91.tmp): pos = 0, size = 788, returned 788
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11137 num=788 wrote=788
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=17409
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=  788 (0x314)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2339 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17474
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 44 00 2E  00 74 00 6D 00 70 00 00  .f.8.D.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17474
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2340 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17544
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 1793 (0x701)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]= 9728 (0x2600)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1280 (0x500)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=17408 (0x4400)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 33 00 2E 00 74 00 6D  00 70 00 00 00           .3...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x26, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x7019f file_attributes = 0x26, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d429d0:size 24) TAMME7/START MENU/PROGRAMS/PRF93.TMP -> tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(287)
>  conversion finished tamme7/Start Menu/Programs/prf93.tmp -> tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x7019f file_attributes = 0x26, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7050, fnum = 11146 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, dos_attrs=0x26 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006)
>  open_match_attributes: file tamme7/start menu/programs/prf93.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x26 returned_unx_mode = 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf93.tmp, after mapping access_mask=0x7019f
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42c00
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf93.tmp, flags = 0102 mode = 0666, fd = 28. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf93.tmp read=Yes write=Yes (numopen=3)
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x26 on file tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666
>[2009/02/25 11:19:10,  5] smbd/open.c:open_file_ntcreate_internal(2095)
>  open_file_ntcreate: reset attributes of file tamme7/start menu/programs/prf93.tmp to 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=3
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11146, open name = tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17544
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=35330 (0x8A02)
>  smb_vwv[ 3]=  811 (0x32B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2341 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17606
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=  104 (0x68)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 89 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17606
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2342 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17664
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 1793 (0x701)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]= 8192 (0x2000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1280 (0x500)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=17408 (0x4400)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 32 00 2E 00 74 00 6D  00 70 00 00 00           .2...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/statcache.c:stat_cache_add(138)
>  stat_cache_add: Added entry (b8d429d0:size 24) TAMME7/START MENU/PROGRAMS/PRF92.TMP -> tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(287)
>  conversion finished tamme7/Start Menu/Programs/prf92.tmp -> tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x7019f file_attributes = 0x20, share_access = 0x0, create_disposition = 0x5 create_options = 0x44 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7051, fnum = 11147 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, dos_attrs=0x20 access_mask=0x7019f share_access=0x0 create_disposition = 0x5 create_options=0x44 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_match_attributes(1006)
>  open_match_attributes: file tamme7/start menu/programs/prf92.tmp old_dos_attr = 0x0, existing_unx_mode = 0100666, new_dos_attr = 0x20 returned_unx_mode = 00
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/start menu/programs/prf92.tmp, after mapping access_mask=0x7019f
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42c00
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x2 flags2=0x240 mode=0666, access_mask = 0x7019f, open_access_mask = 0x7019f
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/start menu/programs/prf92.tmp, flags = 0102 mode = 0666, fd = 32. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/start menu/programs/prf92.tmp read=Yes write=Yes (numopen=4)
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=3
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11147, open name = tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17664
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=35586 (0x8B02)
>  smb_vwv[ 3]=  811 (0x32B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=47931 (0xBB3B)
>  smb_vwv[ 7]=10781 (0x2A1D)
>  smb_vwv[ 8]=51607 (0xC997)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=47931 (0xBB3B)
>  smb_vwv[15]=10781 (0x2A1D)
>  smb_vwv[16]=51607 (0xC997)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=47931 (0xBB3B)
>  smb_vwv[19]=10781 (0x2A1D)
>  smb_vwv[20]=51607 (0xC997)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2343 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17731
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    8 (0x8)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 45 00 2E  .s.\.p.r .f.8.E..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0, fname = tamme7/Templates/prf8E.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8E.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x20189 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7052, fnum = 11148 (7 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8e.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x0 access_mask=0x20189 share_access=0x7 create_disposition = 0x1 create_options=0x840 unix mode=0666 oplock_request=3
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x20189
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42b20
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x3 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x20189, open_access_mask = 0x20189
>[2009/02/25 11:19:10, 10] smbd/open.c:fd_open(122)
>  fd_open: name tamme7/templates/prf8e.tmp, flags = 00 mode = 0666, fd = 33. 
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8e.tmp read=Yes write=No (numopen=3)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=1
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=1
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11148, open name = tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17731
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=35842 (0x8C02)
>  smb_vwv[ 3]=  299 (0x12B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=60197 (0xEB25)
>  smb_vwv[ 7]=38983 (0x9847)
>  smb_vwv[ 8]=49829 (0xC2A5)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=60197 (0xEB25)
>  smb_vwv[15]=38983 (0x9847)
>  smb_vwv[16]=49829 (0xC2A5)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=60197 (0xEB25)
>  smb_vwv[19]=38983 (0x9847)
>  smb_vwv[20]=49829 (0xC2A5)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=  384 (0x180)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2344 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17801
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 80 2B FC 03 00  00 00 00 E2 02 00 00 00  ....+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf90.tmp (fnum 11136) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf90.tmp to 738
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 738 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17801
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2345 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17863
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 81 2B FC 03 00  00 00 00 14 03 00 00 00  ....+... ........
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf91.tmp (fnum 11137) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf91.tmp to 788
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 788 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17863
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 95
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x5f
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2346 of length 99 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=95
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17922
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=   23 (0x17)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=65535 (0xFFFF)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   23 (0x17)
>  smb_vwv[12]=   72 (0x48)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=30
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 82 2B 03 00 17  00 00 00 11 49 4E 45 54  ....+... ....INET
>  [010] 53 57 49 46 54 30 30 30  30 30 30 30 52 00        SWIFT000 0000R.
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 3
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=3 call=7 total_data=23
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4111) cmd=50 (SMBtrans2) NT_STATUS_EAS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=79
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=17922
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 70
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x46
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2347 of length 74 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17992
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 05 01                                    ..... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfsinfo(2592)
>  call_trans2qfsinfo: level = 261
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=17992
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   20 (0x14)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   20 (0x14)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=21
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 27 00 01 00 FF 00 00  00 08 00 00 00 4E 00 54  .'...... .....N.T
>  [010] 00 46 00 53 00                                    .F.S. 
>[2009/02/25 11:19:10,  4] smbd/trans2.c:call_trans2qfsinfo(3119)
>  SMBtrans2 info_level = 261
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2348 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18054
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 89 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18054
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 70
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x46
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2349 of length 74 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18112
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 05 01                                    ..... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfsinfo(2592)
>  call_trans2qfsinfo: level = 261
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18112
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   20 (0x14)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   20 (0x14)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=21
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 27 00 01 00 FF 00 00  00 08 00 00 00 4E 00 54  .'...... .....N.T
>  [010] 00 46 00 53 00                                    .F.S. 
>[2009/02/25 11:19:10,  4] smbd/trans2.c:call_trans2qfsinfo(3119)
>  SMBtrans2 info_level = 261
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2350 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18179
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=  104 (0x68)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8C 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18179
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 180
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xb4
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2351 of length 184 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=180
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18247
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=24064 (0x5E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=97
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 4F 00 75 00 74 00 6C  .a.m.s.\ .O.u.t.l
>  [040] 00 6F 00 6F 00 6B 00 20  00 45 00 78 00 70 00 72  .o.o.k.  .E.x.p.r
>  [050] 00 65 00 73 00 73 00 2E  00 6C 00 6E 00 6B 00 00  .e.s.s.. .l.n.k..
>  [060] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Outlook Express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Outlook Express.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Outlook Express.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/OUTLOOK EXPRESS.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Outlook Express.lnk, dirpath = tamme7/start menu/programs, start = Outlook Express.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Outlook Express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Outlook Express.lnk (len 19) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Outlook Express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Outlook Express.lnk (len 19) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled outlook express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component outlook express.lnk (len 19) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file outlook express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/outlook express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/outlook express.lnk for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18247
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 190
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xbe
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2352 of length 194 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=190
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18306
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=26624 (0x6800)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=107
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 57 00 69 00 6E 00 64  .a.m.s.\ .W.i.n.d
>  [040] 00 6F 00 77 00 73 00 20  00 4D 00 65 00 64 00 69  .o.w.s.  .M.e.d.i
>  [050] 00 61 00 20 00 50 00 6C  00 61 00 79 00 65 00 72  .a. .P.l .a.y.e.r
>  [060] 00 2E 00 6C 00 6E 00 6B  00 00 00                 ...l.n.k ...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Windows Media Player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Windows Media Player.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Windows Media Player.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/WINDOWS MEDIA PLAYER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Windows Media Player.lnk, dirpath = tamme7/start menu/programs, start = Windows Media Player.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Windows Media Player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Windows Media Player.lnk (len 24) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Windows Media Player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Windows Media Player.lnk (len 24) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled windows media player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component windows media player.lnk (len 24) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file windows media player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/windows media player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/windows media player.lnk for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18306
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2353 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=18376
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11138 (0x2B82)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8d.tmp): pos = 0, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11138 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=18376
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] D0 CF 11 E0 A1 B1 1A E1  00 00 00 00 00 00 00 00  ........ ........
>  [010] 00 00 00 00 00 00 00 00  3E 00 03 00 FE FF 09 00  ........ >.......
>  [020] 06 00 00 00 00 00 00 00  00 00 00 00 01 00 00 00  ........ ........
>  [030] 01 00 00 00 00 00 00 00  00 10 00 00 02 00 00 00  ........ ........
>  [040] 01 00 00 00 FE FF FF FF  00 00 00 00 00 00 00 00  ........ ........
>  [050] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [060] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [070] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [080] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [090] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0A0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0B0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0C0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0D0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0E0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [0F0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [100] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [110] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [120] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [130] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [140] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [150] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [160] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [170] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [180] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [190] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1A0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1B0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1C0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1D0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1E0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>  [1F0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF FF  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2354 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18441
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8A 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf93.tmp (fnum = 11146) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18441
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 80 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2355 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18502
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 89 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18502
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2356 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18560
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8B 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/start menu/programs/prf92.tmp (fnum = 11147) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Wed Feb 25 11:19:10 2009
>   access: Wed Feb 25 11:19:10 2009
>   write: Wed Feb 25 11:19:10 2009
>   change: Wed Feb 25 11:19:10 2009
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18560
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 3B BB  1D 2A 97 C9 01 00 3B BB  ......;. .*....;.
>  [010] 1D 2A 97 C9 01 00 3B BB  1D 2A 97 C9 01 00 3B BB  .*....;. .*....;.
>  [020] 1D 2A 97 C9 01 80 00 00  00 00 00 00 00           .*...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2357 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18627
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8C 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18627
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 180
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xb4
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2358 of length 184 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=180
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18695
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=24064 (0x5E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=97
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 4F 00 75 00 74 00 6C  .a.m.s.\ .O.u.t.l
>  [040] 00 6F 00 6F 00 6B 00 20  00 45 00 78 00 70 00 72  .o.o.k.  .E.x.p.r
>  [050] 00 65 00 73 00 73 00 2E  00 6C 00 6E 00 6B 00 00  .e.s.s.. .l.n.k..
>  [060] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Outlook Express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Outlook Express.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Outlook Express.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/OUTLOOK EXPRESS.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Outlook Express.lnk, dirpath = tamme7/start menu/programs, start = Outlook Express.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Outlook Express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Outlook Express.lnk (len 19) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Outlook Express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Outlook Express.lnk (len 19) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled outlook express.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component outlook express.lnk (len 19) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file outlook express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/outlook express.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/outlook express.lnk for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18695
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 190
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xbe
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2359 of length 194 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=190
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18754
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=26624 (0x6800)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=107
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 57 00 69 00 6E 00 64  .a.m.s.\ .W.i.n.d
>  [040] 00 6F 00 77 00 73 00 20  00 4D 00 65 00 64 00 69  .o.w.s.  .M.e.d.i
>  [050] 00 61 00 20 00 50 00 6C  00 61 00 79 00 65 00 72  .a. .P.l .a.y.e.r
>  [060] 00 2E 00 6C 00 6E 00 6B  00 00 00                 ...l.n.k ...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Windows Media Player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Windows Media Player.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Windows Media Player.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/WINDOWS MEDIA PLAYER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Windows Media Player.lnk, dirpath = tamme7/start menu/programs, start = Windows Media Player.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Windows Media Player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Windows Media Player.lnk (len 24) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Windows Media Player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Windows Media Player.lnk (len 24) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled windows media player.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component windows media player.lnk (len 24) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file windows media player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/windows media player.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/windows media player.lnk for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18754
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2360 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18824
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 82 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18824
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2361 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18889
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8A 2B FC 03 00  00 00 00 7A 00 00 00 00  ....+... ...z....
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf93.tmp (fnum 11146) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf93.tmp to 122
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 122 smb_set_file_size: file tamme7/start menu/programs/prf93.tmp : setting new size to 122
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/fileio.c:trigger_write_time_update_immediate(238)
>  Update write time immediate on tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48c68
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=18889
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2362 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18950
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 46 00 2E  00 74 00 6D 00 70 00 00  .f.8.F.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=18950
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2363 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=19008
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8B 2B FC 03 00  00 00 00 23 03 00 00 00  ....+... ...#....
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf92.tmp (fnum 11147) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf92.tmp to 803
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 803 smb_set_file_size: file tamme7/start menu/programs/prf92.tmp : setting new size to 803
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0xc, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/fileio.c:trigger_write_time_update_immediate(238)
>  Update write time immediate on tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48c68
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=19008
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2364 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19075
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8C 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19075
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2365 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19145
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 82 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11138) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19145
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2366 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19206
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 46 00 2E  00 74 00 6D 00 70 00 00  .f.8.F.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19206
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2367 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19267
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 45 00 2E  00 74 00 6D 00 70 00 00  .f.8.E.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19267
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2368 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19337
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 44 00 2E  00 74 00 6D 00 70 00 00  .f.8.D.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19337
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 95
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x5f
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2369 of length 99 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=95
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19398
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=   23 (0x17)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=65535 (0xFFFF)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   23 (0x17)
>  smb_vwv[12]=   72 (0x48)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=30
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 89 2B 03 00 17  00 00 00 11 49 4E 45 54  ....+... ....INET
>  [010] 53 57 49 46 54 30 30 30  30 30 30 30 44 00        SWIFT000 0000D.
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 3
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11145) level=3 call=7 total_data=23
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4111) cmd=50 (SMBtrans2) NT_STATUS_EAS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=79
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19398
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2370 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19459
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 45 00 2E  00 74 00 6D 00 70 00 00  .f.8.E.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19459
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2371 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19523
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11138 (0x2B82)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1536 (0x600)
>  smb_vwv[ 6]= 1536 (0x600)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 1536 (0x600)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (1536) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8d.tmp): pos = 4096, size = 1536, returned 1536
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11138 max=1536 nread=1536
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=1595
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19523
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1536 (0x600)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=1536
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 00 00  00 1D 00 0F 00 03 00 00  ........ ........
>  [010] 00 00 00 00 01 00 00 00  00 00 00 00 0A 00 00 00  ........ ........
>  [020] 09 08 08 00 00 05 10 00  F9 0C CA 07 0B 02 0C 00  ........ ........
>  [030] 00 00 00 00 00 00 00 00  5F 08 00 00 0D 00 02 00  ........ _.......
>  [040] 01 00 0C 00 02 00 64 00  0F 00 02 00 01 00 11 00  ......d. ........
>  [050] 02 00 00 00 10 00 08 00  FC A9 F1 D2 4D 62 50 3F  ........ ....MbP?
>  [060] 5F 00 02 00 01 00 2A 00  02 00 00 00 2B 00 02 00  _.....*. ....+...
>  [070] 01 00 82 00 02 00 00 00  80 00 08 00 00 00 00 00  ........ ........
>  [080] 00 00 00 00 25 02 04 00  00 00 FF 00 8C 00 04 00  ....%... ........
>  [090] 01 00 01 00 81 00 02 00  C1 04 14 00 03 00 02 26  ........ .......&
>  [0A0] 41 15 00 08 00 07 50 61  67 65 20 26 50 83 00 02  A.....Pa ge &P...
>  [0B0] 00 00 00 84 00 02 00 00  00 A1 00 22 00 00 00 01  ........ ..."....
>  [0C0] 00 01 00 01 00 01 00 04  00 00 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 E0 3F 00 00 00  00 00 00 E0 3F 01 00 55  ....?... ....?..U
>  [0E0] 00 02 00 08 00 00 02 0A  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 01 00 00 3E 02 0A 00 B6  00 00 00 00 00 00 00 00  ...>.... ........
>  [100] 00 1D 00 0F 00 03 00 00  00 00 00 00 01 00 00 00  ........ ........
>  [110] 00 00 00 00 0A 00 00 00  09 08 08 00 00 05 10 00  ........ ........
>  [120] F9 0C CA 07 0B 02 0C 00  00 00 00 00 00 00 00 00  ........ ........
>  [130] 57 09 00 00 0D 00 02 00  01 00 0C 00 02 00 64 00  W....... ......d.
>  [140] 0F 00 02 00 01 00 11 00  02 00 00 00 10 00 08 00  ........ ........
>  [150] FC A9 F1 D2 4D 62 50 3F  5F 00 02 00 01 00 2A 00  ....MbP? _.....*.
>  [160] 02 00 00 00 2B 00 02 00  01 00 82 00 02 00 00 00  ....+... ........
>  [170] 80 00 08 00 00 00 00 00  00 00 00 00 25 02 04 00  ........ ....%...
>  [180] 00 00 FF 00 8C 00 04 00  01 00 01 00 81 00 02 00  ........ ........
>  [190] C1 04 14 00 03 00 02 26  41 15 00 08 00 07 50 61  .......& A.....Pa
>  [1A0] 67 65 20 26 50 83 00 02  00 00 00 84 00 02 00 00  ge &P... ........
>  [1B0] 00 A1 00 22 00 00 00 01  00 01 00 01 00 01 00 04  ...".... ........
>  [1C0] 00 00 00 00 00 00 00 00  00 00 00 E0 3F 00 00 00  ........ ....?...
>  [1D0] 00 00 00 E0 3F 01 00 55  00 02 00 08 00 00 02 0A  ....?..U ........
>  [1E0] 00 00 00 00 00 00 00 00  01 00 00 3E 02 0A 00 B6  ........ ...>....
>  [1F0] 00 00 00 00 00 00 00 00  00 1D 00 0F 00 03 00 00  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2372 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19590
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11145 (0x2B89)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8f.tmp): pos = 0, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11145 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19590
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 5B 76 65 72 5D 0D 0A 09  34 0D 0A 5B 73 74 79 5D  [ver]... 4..[sty]
>  [010] 0D 0A 09 0D 0A 5B 66 69  6C 65 73 5D 0D 0A 5B 63  .....[fi les]..[c
>  [020] 68 61 72 73 65 74 5D 0D  0A 09 38 32 0D 0A 09 41  harset]. ..82...A
>  [030] 4E 53 49 20 28 57 69 6E  64 6F 77 73 2C 20 49 42  NSI (Win dows, IB
>  [040] 4D 20 43 50 20 31 32 35  32 29 0D 0A 5B 72 65 76  M CP 125 2)..[rev
>  [050] 69 73 69 6F 6E 73 5D 0D  0A 09 30 0D 0A 5B 70 72  isions]. ..0..[pr
>  [060] 6E 5D 0D 0A 09 48 50 20  4C 61 73 65 72 4A 65 74  n]...HP  LaserJet
>  [070] 20 49 49 49 53 69 20 50  6F 73 74 53 63 72 69 70   IIISi P ostScrip
>  [080] 74 0D 0A 5B 70 6F 72 74  5D 0D 0A 09 5C 5C 50 68  t..[port ]...\\Ph
>  [090] 6F 65 6E 69 78 5C 68 70  6C 6A 73 69 0D 0A 5B 6C  oenix\hp ljsi..[l
>  [0A0] 61 6E 67 5D 0D 0A 09 31  0D 0A 5B 66 6C 64 6E 61  ang]...1 ..[fldna
>  [0B0] 6D 65 73 5D 0D 0A 09 46  69 65 6C 64 31 0D 0A 09  mes]...F ield1...
>  [0C0] 46 69 65 6C 64 32 0D 0A  09 46 69 65 6C 64 33 0D  Field2.. .Field3.
>  [0D0] 0A 09 46 69 65 6C 64 34  0D 0A 09 46 69 65 6C 64  ..Field4 ...Field
>  [0E0] 35 0D 0A 09 46 69 65 6C  64 36 0D 0A 09 46 69 65  5...Fiel d6...Fie
>  [0F0] 6C 64 37 0D 0A 09 46 69  65 6C 64 38 0D 0A 5B 64  ld7...Fi eld8..[d
>  [100] 65 73 63 5D 0D 0A 09 0D  0A 09 0D 0A 09 0D 0A 09  esc].... ........
>  [110] 0D 0A 09 0D 0A 09 37 38  37 33 37 31 34 33 36 0D  ......78 7371436.
>  [120] 0A 09 31 0D 0A 09 37 38  37 33 37 31 34 31 31 0D  ..1...78 7371411.
>  [130] 0A 09 30 0D 0A 09 31 0D  0A 09 30 0D 0A 09 30 0D  ..0...1. ..0...0.
>  [140] 0A 09 30 0D 0A 09 30 0D  0A 09 0D 0A 09 0D 0A 09  ..0...0. ........
>  [150] 0D 0A 09 0D 0A 09 0D 0A  09 0D 0A 09 31 0D 0A 5B  ........ ....1..[
>  [160] 66 6F 70 74 73 5D 0D 0A  09 30 0D 0A 09 31 0D 0A  fopts].. .0...1..
>  [170] 09 30 0D 0A 09 30 0D 0A  09 0D 0A 09 0D 0A 5B 6C  .0...0.. ......[l
>  [180] 6E 6F 70 74 73 5D 0D 0A  09 32 0D 0A 09 42 6F 64  nopts].. .2...Bod
>  [190] 79 20 54 65 78 74 0D 0A  09 31 0D 0A 5B 64 6F 63  y Text.. .1..[doc
>  [1A0] 6F 70 74 73 5D 0D 0A 09  35 0D 0A 09 32 0D 0A 5B  opts]... 5...2..[
>  [1B0] 47 72 61 6D 53 74 79 6C  65 5D 0D 0A 09 0D 0A 5B  GramStyl e].....[
>  [1C0] 74 61 67 5D 0D 0A 09 42  6F 64 79 20 54 65 78 74  tag]...B ody Text
>  [1D0] 0D 0A 09 32 0D 0A 09 5B  66 6E 74 5D 0D 0A 09 09  ...2...[ fnt]....
>  [1E0] 54 69 6D 65 73 20 4E 65  77 20 52 6F 6D 61 6E 0D  Times Ne w Roman.
>  [1F0] 0A 09 09 32 34 30 0D 0A  09 09 30 0D 0A 09 09 34  ...240.. ..0....4
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 95
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x5f
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2373 of length 99 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=95
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19657
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=   23 (0x17)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=65535 (0xFFFF)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   23 (0x17)
>  smb_vwv[12]=   72 (0x48)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=30
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8C 2B 03 00 17  00 00 00 11 49 4E 45 54  ....+... ....INET
>  [010] 53 57 49 46 54 30 30 30  30 30 30 30 4F 00        SWIFT000 0000O.
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 3
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11148) level=3 call=7 total_data=23
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4111) cmd=50 (SMBtrans2) NT_STATUS_EAS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=79
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19657
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2374 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19718
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 82 2B EC 03 00  00 00 00 00 00 00 00 00  ....+... ........
>  [010] 00 00 00 FF FF FF FF FF  FF FF FF 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8d.tmp (fnum 11138) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003
>   t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19718
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2375 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19782
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11145 (0x2B89)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  474 (0x1DA)
>  smb_vwv[ 6]=  474 (0x1DA)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=  474 (0x1DA)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (474) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8f.tmp): pos = 4096, size = 474, returned 474
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11145 max=474 nread=474
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=533
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19782
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=  474 (0x1DA)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=474
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 38 30 30 0D 0A 09 09 32  0D 0A 09 09 32 0D 0A 09  800....2 ....2...
>  [010] 09 34 36 38 30 0D 0A 09  09 33 0D 0A 09 09 39 33  .4680... .3....93
>  [020] 36 30 0D 0A 09 5B 74 78  74 5D 0D 0A 3E 0D 0A 09  60...[tx t]..>...
>  [030] 5B 66 72 67 68 74 5D 0D  0A 09 5B 6C 79 66 72 6D  [frght]. ..[lyfrm
>  [040] 5D 0D 0A 09 09 31 0D 0A  09 09 31 33 32 34 38 0D  ]....1.. ..13248.
>  [050] 0A 09 09 30 0D 0A 09 09  31 34 34 30 30 0D 0A 09  ...0.... 14400...
>  [060] 09 31 32 32 34 30 0D 0A  09 09 31 35 38 34 30 0D  .12240.. ..15840.
>  [070] 0A 09 09 30 0D 0A 09 09  31 0D 0A 09 09 33 0D 0A  ...0.... 1....3..
>  [080] 09 09 31 20 30 20 30 20  30 20 30 20 30 20 30 0D  ..1 0 0  0 0 0 0.
>  [090] 0A 09 09 30 0D 0A 09 09  30 0D 0A 09 09 32 0D 0A  ...0.... 0....2..
>  [0A0] 09 5B 66 72 6D 6C 61 79  5D 0D 0A 09 09 31 35 38  .[frmlay ]....158
>  [0B0] 34 30 0D 0A 09 09 31 32  32 34 30 0D 0A 09 09 31  40....12 240....1
>  [0C0] 0D 0A 09 09 31 34 34 30  0D 0A 09 09 37 39 32 0D  ....1440 ....792.
>  [0D0] 0A 09 09 31 0D 0A 09 09  31 34 34 37 32 0D 0A 09  ...1.... 14472...
>  [0E0] 09 31 34 34 30 0D 0A 09  09 30 0D 0A 09 09 31 0D  .1440... .0....1.
>  [0F0] 0A 09 09 30 0D 0A 09 09  31 0D 0A 09 09 31 0D 0A  ...0.... 1....1..
>  [100] 09 09 30 0D 0A 09 09 31  0D 0A 09 09 31 34 34 30  ..0....1 ....1440
>  [110] 0D 0A 09 09 31 30 38 30  30 0D 0A 09 09 32 0D 0A  ....1080 0....2..
>  [120] 09 09 32 0D 0A 09 09 34  36 38 30 0D 0A 09 09 33  ..2....4 680....3
>  [130] 0D 0A 09 09 39 33 36 30  0D 0A 09 5B 74 78 74 5D  ....9360 ...[txt]
>  [140] 0D 0A 3E 0D 0A 5B 65 6C  61 79 5D 0D 0A 5B 6C 31  ..>..[el ay]..[l1
>  [150] 5D 0D 0A 09 30 0D 0A 5B  70 67 5D 0D 0A 09 31 0D  ]...0..[ pg]...1.
>  [160] 0A 09 30 20 30 20 30 20  31 30 32 35 20 30 20 30  ..0 0 0  1025 0 0
>  [170] 20 30 20 30 20 36 35 35  33 35 20 53 74 61 6E 64   0 0 655 35 Stand
>  [180] 61 72 64 09 36 35 35 33  35 20 30 20 30 09 30 20  ard.6553 5 0 0.0 
>  [190] 30 20 30 20 30 20 30 20  30 20 30 20 36 35 35 33  0 0 0 0  0 0 6553
>  [1A0] 35 20 30 20 30 20 36 35  35 33 35 20 30 20 30 20  5 0 0 65 535 0 0 
>  [1B0] 30 20 30 20 30 0D 0A 5B  65 64 6F 63 5D 0D 0A 3E  0 0 0..[ edoc]..>
>  [1C0] 0D 0A 0D 0A 5B 45 6D 62  65 64 64 65 64 5D 0D 0A  ....[Emb edded]..
>  [1D0] 30 30 30 30 34 35 34 38  0D 0A                    00004548 ..
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2376 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19849
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 0, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19849
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 01 00 00 53 74 61 6E  64 61 72 64 20 4A 65 74  ....Stan dard Jet
>  [010] 20 44 42 00 01 00 00 00  B5 6E 03 62 60 09 C2 55   DB..... .n.b`..U
>  [020] E9 A9 67 72 40 3F 00 9C  7E 9F 90 FF 85 9A 31 C5  ..gr@?.. ~.....1.
>  [030] 79 BA ED 30 BC DF CC 9D  63 D9 E4 C3 9F 46 FB 8A  y..0.... c....F..
>  [040] BC 4E 61 69 EC 37 BA D6  9C FA 21 CC 28 E6 F4 24  .Nai.7.. ..!.(..$
>  [050] 8A 60 B3 06 7B 36 12 E0  DF B1 90 66 13 43 28 3D  .`..{6.. ...f.C(=
>  [060] B1 33 D3 F3 79 5B 75 27  7C 2A 4F E9 7C 99 08 1F  .3..y[u' |*O.|...
>  [070] 98 FD B9 31 87 FD 8E 62  82 66 5F 95 F8 D0 89 24  ...1...b .f_....$
>  [080] 85 67 C6 1F 27 44 D2 EE  CF 65 ED FF 07 C7 46 A1  .g..'D.. .e....F.
>  [090] 78 16 0C ED E9 2D 62 D4  54 06 00 00 34 2E 30 00  x....-b. T...4.0.
>  [0A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [100] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [110] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [120] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [130] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [140] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [150] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [160] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [170] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [180] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [190] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2377 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19910
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 89 2B EC 03 00  00 00 00 00 00 00 00 00  ....+... ........
>  [010] 00 00 00 FF FF FF FF FF  FF FF FF 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8f.tmp (fnum 11145) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Mon Mar 31 15:00:00 2003
>   t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=19910
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2378 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19974
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]=28672 (0x7000)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 94208, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=19974
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 01 01 19 0C 4C 56 41 4C  00 00 00 00 02 00 6C 0C  ....LVAL ......l.
>  [010] 2B 0C 63 0F 50 0F 3D 0F  2A 0F B3 0E A0 0E 8D 0E  +.c.P.=. *.......
>  [020] 7A 0E 03 0E F0 0D DD 0D  CA 0D B7 0D 40 0D 2D 0D  z....... ....@.-.
>  [030] 1A 0D A3 0C 90 0C 7D 0C  6A 0C F3 0B E0 0B CD 0B  ......}. j.......
>  [040] BA 0B 43 0B 30 0B 1D 0B  0A 0B F7 0A 80 0A 6D 0A  ..C.0... ......m.
>  [050] 5A 0A 47 0A 00 00 00 00  00 00 00 00 00 00 00 00  Z.G..... ........
>  [060] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [070] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [080] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [090] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [100] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [110] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [120] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [130] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [140] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [150] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [160] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [170] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [180] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [190] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2379 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20038
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 4096, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20038
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 01 01 64 0F 01 00 00 00  00 00 00 00 02 00 BB 0F  ..d..... ........
>  [010] 76 0F 00 00 00 00 00 00  00 00 00 00 00 00 08 00  v....... ........
>  [020] 00 01 00 02 00 10 00 00  20 00 00 01 00 08 00 20  ........  ...... 
>  [030] 00 80 00 00 08 00 00 04  00 00 02 00 00 40 00 00  ........ .....@..
>  [040] 01 00 80 00 00 40 00 00  00 00 00 00 00 00 00 00  .....@.. ........
>  [050] 00 00 00 00 00 00 00 00  00 00 00 02 00 05 00 00  ........ ........
>  [060] 00 00 38 00 00 A8 95 1F  00 01 00 00 00 00 00 00  ..8..... ........
>  [070] 00 00 00 00 00 00 00 00  00 01 00 00 00 10 00 EC  ........ ........
>  [080] 06 FA ED 0F 30 53 00 79  00 73 00 41 00 63 00 63  ....0S.y .s.A.c.c
>  [090] 00 65 00 73 00 73 00 4F  00 62 00 6A 00 65 00 63  .e.s.s.O .b.j.e.c
>  [0A0] 00 74 00 73 00 87 A2 4C  00 4C 00 4C 00 4C 00 4C  .t.s...L .L.L.L.L
>  [0B0] 00 4C 00 4C 00 4C 00 4C  00 4C 00 4A 00 20 00 0B  .L.L.L.L .L.J. ..
>  [0C0] 00 FF 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [100] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [110] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [120] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [130] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [140] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [150] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [160] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [170] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [180] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [190] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2380 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20105
>  smt_wct=3
>  smb_vwv[ 0]=11136 (0x2B80)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=30 fnum=11136 (numopen=4)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d428a0
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Wed Feb 25 11:18:08 2009
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B02C
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48c90
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B02C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:18:08 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf90.tmp (numopen=3) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11136 (6 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20105
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2381 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20169
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 30 00 2E 00 74 00 6D  00 70 00 00 00           .0...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP] -> [tamme7/start menu/programs/prf90.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf90.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20169
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2382 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20233
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]=24576 (0x6000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 24576, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20233
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 01 01 59 07 00 00 00 00  00 00 00 00 1F 00 BB 0F  ..Y..... ........
>  [010] 76 0F 31 0F EC 0E A7 0E  62 0E 1D 0E D8 0D 93 0D  v.1..... b.......
>  [020] 4E 0D 09 0D C4 0C 7F 0C  3A 0C F5 0B B0 0B 6B 0B  N....... :.....k.
>  [030] 26 0B E1 0A 9C 0A 57 0A  12 0A CD 09 88 09 43 09  &.....W. ......C.
>  [040] FE 08 B9 08 74 08 2F 08  EA 07 A5 07 00 00 00 00  ....t./. ........
>  [050] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [060] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [070] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [080] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [090] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [100] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [110] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [120] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [130] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [140] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [150] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [160] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [170] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [180] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [190] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1E0] 7F 80 00 00 00 00 00 1C  00 7F 80 00 00 01 00 00  ........ ........
>  [1F0] 1D 00 7F 80 00 00 02 00  00 1E 00 7F 80 00 00 03  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2383 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20294
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8A 2B EC 03 00  00 00 00 00 00 00 00 00  ....+... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 E0 86 8B F8 29  ........ .......)
>  [020] 97 C9 01 E0 86 8B F8 29  97 C9 01 00 00 00 00 00  .......) ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf93.tmp (fnum 11146) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48bf8
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:18:08 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20294
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2384 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20355
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8B 2B EC 03 00  00 00 00 00 00 00 00 00  ....+... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 80 23 56 F6 29  ........ ....#V.)
>  [020] 97 C9 01 80 23 56 F6 29  97 C9 01 00 00 00 00 00  ....#V.) ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf92.tmp (fnum 11147) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:18:04 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:04 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48b18
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:18:04 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20355
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2385 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20416
>  smt_wct=3
>  smb_vwv[ 0]=11138 (0x2B82)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=29 fnum=11138 (numopen=3)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d428a0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8d.tmp (numopen=2) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11138 (5 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20416
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2386 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20489
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]= 8192 (0x2000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 8192, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20489
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 02 01 DE 0B 00 00 00 00  1A 04 00 00 59 06 00 00  ........ ....Y...
>  [010] 11 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  53 11 00 0B 00 11 00 02  ........ S.......
>  [030] 00 00 00 02 00 00 00 00  06 00 00 01 06 00 00 00  ........ ........
>  [040] 00 00 00 11 00 00 00 00  00 00 00 00 00 00 00 11  ........ ........
>  [050] 00 00 00 00 00 00 00 0C  59 06 00 00 09 00 03 00  ........ Y.......
>  [060] 00 00 09 04 00 00 12 00  00 00 00 00 00 00 00 00  ........ ........
>  [070] 0C 59 06 00 00 08 00 02  00 00 00 09 04 00 00 12  .Y...... ........
>  [080] 00 00 00 00 00 00 00 00  00 08 59 06 00 00 04 00  ........ ..Y.....
>  [090] 01 00 00 00 09 04 00 00  13 00 00 00 00 00 0A 00  ........ ........
>  [0A0] 08 00 08 59 06 00 00 05  00 01 00 00 00 09 04 00  ...Y.... ........
>  [0B0] 00 13 00 00 00 00 00 12  00 08 00 04 59 06 00 00  ........ ....Y...
>  [0C0] 07 00 02 00 00 00 09 04  00 00 13 00 00 00 00 00  ........ ........
>  [0D0] 1A 00 04 00 0A 59 06 00  00 0A 00 04 00 00 00 09  .....Y.. ........
>  [0E0] 04 00 00 12 00 00 00 00  00 00 00 FE 01 04 59 06  ........ ......Y.
>  [0F0] 00 00 00 00 00 00 00 00  09 04 00 00 13 00 00 00  ........ ........
>  [100] 00 00 00 00 04 00 0B 59  06 00 00 0D 00 07 00 00  .......Y ........
>  [110] 00 09 04 00 00 12 00 00  00 00 00 00 00 00 00 0B  ........ ........
>  [120] 59 06 00 00 10 00 0A 00  00 00 09 04 00 00 12 00  Y....... ........
>  [130] 00 00 00 00 00 00 00 00  0B 59 06 00 00 0F 00 09  ........ .Y......
>  [140] 00 00 00 09 04 00 00 12  00 00 00 00 00 00 00 00  ........ ........
>  [150] 00 0B 59 06 00 00 0E 00  08 00 00 00 09 04 00 00  ..Y..... ........
>  [160] 12 00 00 00 00 00 00 00  00 00 0A 59 06 00 00 02  ........ ...Y....
>  [170] 00 00 00 00 00 09 04 00  00 12 00 00 00 00 00 00  ........ ........
>  [180] 00 FE 01 09 59 06 00 00  06 00 01 00 00 00 09 04  ....Y... ........
>  [190] 00 00 32 00 00 00 00 00  00 00 FE 01 04 59 06 00  ..2..... .....Y..
>  [1A0] 00 01 00 00 00 00 00 09  04 00 00 13 00 00 00 00  ........ ........
>  [1B0] 00 04 00 04 00 0B 59 06  00 00 0C 00 06 00 00 00  ......Y. ........
>  [1C0] 09 04 00 00 12 00 00 00  00 00 00 00 00 00 09 59  ........ .......Y
>  [1D0] 06 00 00 0B 00 05 00 00  00 09 04 00 00 12 00 00  ........ ........
>  [1E0] 00 00 00 00 00 FE 01 03  59 06 00 00 03 00 01 00  ........ Y.......
>  [1F0] 00 00 09 04 00 00 13 00  00 00 00 00 08 00 02 00  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2387 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20552
>  smt_wct=3
>  smb_vwv[ 0]=11145 (0x2B89)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=27 fnum=11145 (numopen=2)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8f.tmp (numopen=1) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11145 (4 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20552
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2388 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20611
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=14336 (0x3800)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=   96 (0x60)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]=11146 (0x2B8A)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBnttrans (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682)
>  reply_nttrans: state->setup_count = 8
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 60 00 09 00 8A 2B 01 00                           `....+.. 
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741)
>  call_nt_transact_ioctl: function[0x00090060] FID[0x2B8A] isFSctl[0x01] compfilter[0x00]
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20611
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2389 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20678
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=14336 (0x3800)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=   96 (0x60)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]=11147 (0x2B8B)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBnttrans (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_nttrans(2682)
>  reply_nttrans: state->setup_count = 8
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 60 00 09 00 8B 2B 01 00                           `....+.. 
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:call_nt_transact_ioctl(1741)
>  call_nt_transact_ioctl: function[0x00090060] FID[0x2B8B] isFSctl[0x01] compfilter[0x00]
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(1993) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20678
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2390 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20736
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4352 (0x1100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 7E 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  ~\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 44 00 2E  .s.\.p.r .f.8.D..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Templates/prf8D.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8D.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7053, fnum = 11149 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8d.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, dos_attrs=0x0 access_mask=0x110080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, after mapping access_mask=0x110080
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d430d0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x110080, open_access_mask = 0x110080
>[2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87)
>  check_open_rights: file tamme7/templates/prf8d.tmp requesting 0x110080 returning 0x10000 (NT_STATUS_ACCESS_DENIED)
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file(439)
>  open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8d.tmp read=No write=No (numopen=4)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=1
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=1
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11149, open name = tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20736
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=36096 (0x8D00)
>  smb_vwv[ 3]=  299 (0x12B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 9184 (0x23E0)
>  smb_vwv[ 7]=32014 (0x7D0E)
>  smb_vwv[ 8]=49911 (0xC2F7)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 9184 (0x23E0)
>  smb_vwv[15]=32014 (0x7D0E)
>  smb_vwv[16]=49911 (0xC2F7)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 9184 (0x23E0)
>  smb_vwv[19]=32014 (0x7D0E)
>  smb_vwv[20]=49911 (0xC2F7)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=   22 (0x16)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2391 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20808
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4352 (0x1100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 46 00 2E  .s.\.p.r .f.8.F..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Templates/prf8F.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8F.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7054, fnum = 11150 (6 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8f.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x0 access_mask=0x110080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x110080
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d430d0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x110080, open_access_mask = 0x110080
>[2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87)
>  check_open_rights: file tamme7/templates/prf8f.tmp requesting 0x110080 returning 0x10000 (NT_STATUS_ACCESS_DENIED)
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file(439)
>  open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8f.tmp read=No write=No (numopen=5)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=1
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=1
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11150, open name = tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=20808
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=36352 (0x8E00)
>  smb_vwv[ 3]=  299 (0x12B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 9184 (0x23E0)
>  smb_vwv[ 7]=32014 (0x7D0E)
>  smb_vwv[ 8]=49911 (0xC2F7)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]= 9184 (0x23E0)
>  smb_vwv[15]=32014 (0x7D0E)
>  smb_vwv[16]=49911 (0xC2F7)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]= 9184 (0x23E0)
>  smb_vwv[19]=32014 (0x7D0E)
>  smb_vwv[20]=49911 (0xC2F7)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=55808 (0xDA00)
>  smb_vwv[28]=   17 (0x11)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2392 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20873
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]=12288 (0x3000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 12288, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20873
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 02 01 A9 0E 00 00 00 00  4F 01 00 00 59 06 00 00  ........ O...Y...
>  [010] 35 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  5....... ........
>  [020] 00 00 00 00 00 00 00 00  53 04 00 01 00 04 00 01  ........ S.......
>  [030] 00 00 00 01 00 00 00 12  06 00 00 13 06 00 00 00  ........ ........
>  [040] 00 00 00 11 00 00 00 00  00 00 00 04 59 06 00 00  ........ ....Y...
>  [050] 02 00 01 00 00 00 09 04  00 00 13 00 00 00 00 00  ........ ........
>  [060] 04 00 04 00 01 59 06 00  00 03 00 01 00 00 00 09  .....Y.. ........
>  [070] 04 00 00 13 00 00 00 00  00 00 00 01 00 04 59 06  ........ ......Y.
>  [080] 00 00 00 00 00 00 00 00  09 04 00 00 13 00 00 00  ........ ........
>  [090] 00 00 00 00 04 00 09 59  06 00 00 01 00 00 00 00  .......Y ........
>  [0A0] 00 09 04 00 00 32 00 00  00 00 00 07 00 FE 01 06  .....2.. ........
>  [0B0] 00 41 00 43 00 4D 00 18  00 46 00 49 00 6E 00 68  .A.C.M.. .F.I.n.h
>  [0C0] 00 65 00 72 00 69 00 74  00 61 00 62 00 6C 00 65  .e.r.i.t .a.b.l.e
>  [0D0] 00 10 00 4F 00 62 00 6A  00 65 00 63 00 74 00 49  ...O.b.j .e.c.t.I
>  [0E0] 00 64 00 06 00 53 00 49  00 44 00 83 07 00 00 00  .d...S.I .D......
>  [0F0] 00 01 FF FF 00 FF FF 00  FF FF 09 FF FF 00 FF FF  ........ ........
>  [100] 00 FF FF 00 FF FF 04 FF  FF 12 FF FF 00 14 06 00  ........ ........
>  [110] 00 09 00 00 00 41 00 74  00 88 00 00 00 00 00 59  .....A.t .......Y
>  [120] 06 00 00 00 00 00 00 00  00 00 00 00 FF FF FF FF  ........ ........
>  [130] 00 00 00 00 04 04 00 00  00 00 00 10 00 4F 00 62  ........ .....O.b
>  [140] 00 6A 00 65 00 63 00 74  00 49 00 64 00 FF FF 00  .j.e.c.t .I.d....
>  [150] 00 00 00 00 00 00 00 34  36 7D 23 35 2E 30 23 00  .......4 6}#5.0#.
>  [160] 30 23 43 3A 5C 50 72 6F  00 67 72 61 6D 20 46 69  0#C:\Pro .gram Fi
>  [170] 6C 00 65 73 5C 43 6F 6D  6D 6F 02 6E 04 0C 4D 69  l.es\Com mo.n..Mi
>  [180] 63 72 6F 73 00 6F 66 74  20 53 68 61 72 08 65 64  cros.oft  Shar.ed
>  [190] 5C 00 77 5C 64 61 6F 00  33 36 30 2E 64 6C 6C 23  \.w\dao. 360.dll#
>  [1A0] 03 87 0F 00 0C 20 33 2E  36 20 4F 00 62 6A 65 63  ..... 3. 6 O.bjec
>  [1B0] 74 20 4C 69 60 62 72 61  72 79 00 48 00 01 16 02  t Li`bra ry.H....
>  [1C0] 00 01 7C 41 44 4F 44 42  3E 44 00 0A 00 08 41 00  ..|ADODB >D....A.
>  [1D0] 44 00 5A 44 D4 00 42 00  5C 99 80 07 8F 80 01 04  D.ZD..B. \.......
>  [1E0] 5C 43 00 5D 07 5C 31 30  2D 38 03 5C 41 00 41 30  \C.].\10 -8.\A.A0
>  [1F0] 30 36 44 32 45 41 40 34  7D 23 32 2E 31 04 5C 52  06D2EA@4 }#2.1.\R
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 186
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xba
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2393 of length 190 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=186
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20931
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11146 (0x2B8A)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  122 (0x7A)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=123
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE 5B 4C 6F 63 61 6C 69  7A 65 64 46 69 6C 65 4E  .[Locali zedFileN
>  [010] 61 6D 65 73 5D 0D 0A 4F  75 74 6C 6F 6F 6B 20 45  ames]..O utlook E
>  [020] 78 70 72 65 73 73 2E 6C  6E 6B 3D 40 78 70 73 70  xpress.l nk=@xpsp
>  [030] 31 72 65 73 2E 64 6C 6C  2C 2D 31 31 30 30 34 0D  1res.dll ,-11004.
>  [040] 0A 57 69 6E 64 6F 77 73  20 4D 65 64 69 61 20 50  .Windows  Media P
>  [050] 6C 61 79 65 72 2E 6C 6E  6B 3D 40 43 3A 5C 57 49  layer.ln k=@C:\WI
>  [060] 4E 44 4F 57 53 5C 69 6E  66 5C 75 6E 72 65 67 6D  NDOWS\in f\unregm
>  [070] 70 32 2E 65 78 65 2C 2D  34 0D 0A                 p2.exe,- 4..
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (122) too small for minimum aio_write of 0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf93.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/start menu/programs/prf93.tmp): pos = 0, size = 122, returned 122
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11146 num=122 wrote=122
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20931
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=  122 (0x7A)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 867
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x363
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2394 of length 871 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=867
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20998
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11147 (0x2B8B)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  803 (0x323)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=804
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] EE 4C 00 00 00 01 14 02  00 00 00 00 00 C0 00 00  .L...... ........
>  [010] 00 00 00 00 46 9F 00 00  00 20 00 00 00 40 BC 5B  ....F... . ...@.[
>  [020] 39 6E 5A C3 01 90 0C 36  F6 29 97 C9 01 80 10 17  9nZ....6 .)......
>  [030] 32 9A 61 C9 01 A8 AC 09  00 00 00 00 00 01 00 00  2.a..... ........
>  [040] 00 00 00 00 00 00 00 00  00 00 00 00 00 17 01 14  ........ ........
>  [050] 00 1F 50 E0 4F D0 20 EA  3A 69 10 A2 D8 08 00 2B  ..P.O. . :i.....+
>  [060] 30 30 9D 19 00 2F 43 3A  5C 00 00 00 00 00 00 00  00.../C: \.......
>  [070] 00 00 00 00 00 00 00 00  00 00 00 00 4A 00 31 00  ........ ....J.1.
>  [080] 00 00 00 00 3E 3A B1 3A  30 00 50 52 4F 47 52 41  ....>:.: 0.PROGRA
>  [090] 7E 31 00 00 32 00 03 00  04 00 EF BE 4F 2B 59 62  ~1..2... ....O+Yb
>  [0A0] 59 3A AD 49 14 00 00 00  50 00 72 00 6F 00 67 00  Y:.I.... P.r.o.g.
>  [0B0] 72 00 61 00 6D 00 20 00  46 00 69 00 6C 00 65 00  r.a.m. . F.i.l.e.
>  [0C0] 73 00 00 00 18 00 52 00  31 00 00 00 00 00 4B 3A  s.....R. 1.....K:
>  [0D0] 5A 2F 10 00 49 4E 54 45  52 4E 7E 31 00 00 3A 00  Z/..INTE RN~1..:.
>  [0E0] 03 00 04 00 EF BE 4F 2B  77 9B 59 3A 2E 4A 14 00  ......O+ w.Y:.J..
>  [0F0] 00 00 49 00 6E 00 74 00  65 00 72 00 6E 00 65 00  ..I.n.t. e.r.n.e.
>  [100] 74 00 20 00 45 00 78 00  70 00 6C 00 6F 00 72 00  t. .E.x. p.l.o.r.
>  [110] 65 00 72 00 00 00 18 00  4C 00 32 00 A8 AC 09 00  e.r..... L.2.....
>  [120] 93 39 2D 2B 20 00 69 65  78 70 6C 6F 72 65 2E 65  .9-+ .ie xplore.e
>  [130] 78 65 00 00 30 00 03 00  04 00 EF BE 04 2F A8 4E  xe..0... ...../.N
>  [140] 59 3A 42 4A 14 00 00 00  69 00 65 00 78 00 70 00  Y:BJ.... i.e.x.p.
>  [150] 6C 00 6F 00 72 00 65 00  2E 00 65 00 78 00 65 00  l.o.r.e. ..e.x.e.
>  [160] 00 00 1C 00 00 00 5E 00  00 00 1C 00 00 00 01 00  ......^. ........
>  [170] 00 00 1C 00 00 00 2D 00  00 00 00 00 00 00 5D 00  ......-. ......].
>  [180] 00 00 11 00 00 00 03 00  00 00 31 AD CB 30 10 00  ........ ..1..0..
>  [190] 00 00 00 43 3A 5C 50 72  6F 67 72 61 6D 20 46 69  ...C:\Pr ogram Fi
>  [1A0] 6C 65 73 5C 49 6E 74 65  72 6E 65 74 20 45 78 70  les\Inte rnet Exp
>  [1B0] 6C 6F 72 65 72 5C 69 65  78 70 6C 6F 72 65 2E 65  lorer\ie xplore.e
>  [1C0] 78 65 00 00 26 00 40 00  22 00 25 00 77 00 69 00  xe..&.@. ".%.w.i.
>  [1D0] 6E 00 64 00 69 00 72 00  25 00 5C 00 53 00 79 00  n.d.i.r. %.\.S.y.
>  [1E0] 73 00 74 00 65 00 6D 00  33 00 32 00 5C 00 69 00  s.t.e.m. 3.2.\.i.
>  [1F0] 65 00 34 00 75 00 69 00  6E 00 69 00 74 00 2E 00  e.4.u.i. n.i.t...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBwriteX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_write_and_X(329)
>  schedule_aio_write_and_X: write size (803) too small for minimum aio_write of 0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10, 10] smbd/dosmode.c:file_set_dosmode(432)
>  file_set_dosmode: setting dos mode 0x20 on file tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning [sparse]
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/start menu/programs/prf92.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x4, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/fileio.c:real_write_file(140)
>  real_write_file (tamme7/start menu/programs/prf92.tmp): pos = 0, size = 803, returned 803
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_write_and_X(4121)
>  writeX fnum=11147 num=803 wrote=803
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=20998
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=  803 (0x323)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2395 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21056
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8D 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = 11149) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21056
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2396 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21128
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8E 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = 11150) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21128
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2397 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21193
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]=49152 (0xC000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 49152, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21193
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 04 01 20 0E 05 00 00 00  00 00 00 00 00 00 00 00  .. ..... ........
>  [010] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [040] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [050] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [060] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [070] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [080] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [090] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [100] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [110] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [120] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [130] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [140] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [150] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [160] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [170] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [180] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [190] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1A0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1C0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [1F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2398 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21250
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8A 2B FC 03 00  00 00 00 7A 00 00 00 00  ....+... ...z....
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf93.tmp (fnum 11146) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf93.tmp to 122
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 122 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21250
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 84
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x54
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2399 of length 88 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21315
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=19
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8B 2B FC 03 00  00 00 00 23 03 00 00 00  ....+... ...#....
>  [010] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/start menu/programs/prf92.tmp (fnum 11147) info_level=1020 totdata=8
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_end_of_file_info(5875)
>  smb_set_file_end_of_file_info: Set end of file info for file tamme7/start menu/programs/prf92.tmp to 803
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_size(5025)
>  smb_set_file_size: size: 803 t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21315
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 59
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x3b
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2400 of length 63 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21379
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11148 (0x2B8C)
>  smb_vwv[ 3]=57344 (0xE000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBreadX (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/aio.c:schedule_aio_read_and_X(237)
>  schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0
>[2009/02/25 11:19:10, 10] smbd/fileio.c:read_file(104)
>  read_file (tamme7/templates/prf8e.tmp): pos = 57344, size = 4096, returned 4096
>[2009/02/25 11:19:10,  3] smbd/reply.c:send_file_readX(3312)
>  send_file_readX fnum=11148 max=4096 nread=4096
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=4155
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21379
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=4096
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 01 01 FB 09 02 00 00 00  00 00 00 00 11 00 B5 0F  ........ ........
>  [010] 64 0F 0B 0F B4 0E 5F 0E  10 0E BB 0D 5A 0D FD 0C  d....._. ....Z...
>  [020] B4 0C 67 0C 1A 0C CD 0B  82 0B ED 0A 8C 0A 2B 0A  ..g..... ......+.
>  [030] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 FF  ........ ........
>  [040] FF 00 00 00 00 00 00 00  00 0B F7 0A 80 0A 6D 0A  ........ ......m.
>  [050] 5A 0A 47 0A D0 09 BD 09  AA 09 97 02 00 05 00 00  Z.G..... ........
>  [060] 00 00 1E 00 00 5C 02 10  30 94 D6 13 00 00 02 00  .....\.. 0.......
>  [070] 00 00 02 00 00 9C D6 13  00 39 DB 1F 77 00 00 00  ........ .9..w...
>  [080] 00 00 00 00 00 00 00 00  6F 68 02 03 00 00 00 01  ........ oh......
>  [090] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 63  ........ .......c
>  [0A0] 00 74 00 00 00 00 00 00  00 00 00 4C 00 4C 00 53  .t...... ...L.L.S
>  [0B0] 40 4C 01 00 00 4C 00 D0  A5 AA 02 58 9E AA 02 03  @L...L.. ...X....
>  [0C0] 00 00 00 FF 00 00 00 00  61 68 02 70 65 68 02 B0  ........ ah.peh..
>  [0D0] 64 68 02 20 6F 68 02 C0  61 68 02 84 A4 AA 02 84  dh. oh.. ah......
>  [0E0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [0F0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [100] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [110] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [120] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [130] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [140] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [150] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [160] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [170] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [180] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [190] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [1A0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [1B0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [1C0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [1D0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [1E0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>  [1F0] A4 AA 02 84 A4 AA 02 84  A4 AA 02 84 A4 AA 02 84  ........ ........
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 116
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x74
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2401 of length 120 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=21443
>  smt_wct=15
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    6 (0x6)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=   40 (0x28)
>  smb_vwv[12]=   76 (0x4C)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    8 (0x8)
>  smb_bcc=51
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8C 2B EC 03 00  00 00 00 00 00 00 00 00  ....+... ........
>  [010] 00 00 00 FF FF FF FF FF  FF FF FF 00 00 00 00 00  ........ ........
>  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [030] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2setfilepathinfo(6777)
>  call_trans2setfilepathinfo(8) tamme7/templates/prf8e.tmp (fnum 11148) info_level=1004 totdata=40
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_dosmode(4990)
>  smb_set_file_dosmode: dosmode: 0x0
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_basic_info(5740)
>  smb_set_file_basic_info: file tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Tue Dec 17 08:48:18 2002
>   t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=58
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=21443
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=3
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00                                          ... 
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2402 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21507
>  smt_wct=3
>  smb_vwv[ 0]=11137 (0x2B81)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=31 fnum=11137 (numopen=5)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d428a0
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Wed Feb 25 11:17:45 2009
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B12C
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:17:45 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:17:45 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48b80
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B12C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:17:45 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf91.tmp (numopen=4) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11137 (5 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21507
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2403 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21570
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 30 00 2E 00 74 00 6D  00 70 00 00 00           .0...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf90.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf90.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF90.TMP] -> [tamme7/start menu/programs/prf90.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf90.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf90.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21570
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2404 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21635
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 31 00 2E 00 74 00 6D  00 70 00 00 00           .1...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP] -> [tamme7/start menu/programs/prf91.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf91.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21635
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 164
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa4
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2405 of length 168 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=164
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21705
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=19968 (0x4E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=81
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 7E 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  ~\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 64 00 65 00 73 00 6B  .a.m.s.\ .d.e.s.k
>  [040] 00 74 00 6F 00 70 00 2E  00 69 00 6E 00 69 00 00  .t.o.p.. .i.n.i..
>  [050] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/desktop.ini for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21705
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 184
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xb8
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2406 of length 188 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=184
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21763
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=25088 (0x6200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=101
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 49 00 6E 00 74 00 65  .a.m.s.\ .I.n.t.e
>  [040] 00 72 00 6E 00 65 00 74  00 20 00 45 00 78 00 70  .r.n.e.t . .E.x.p
>  [050] 00 6C 00 6F 00 72 00 65  00 72 00 2E 00 6C 00 6E  .l.o.r.e .r...l.n
>  [060] 00 6B 00 00 00                                    .k... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled internet explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component internet explorer.lnk (len 21) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file internet explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/internet explorer.lnk for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21763
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2407 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21833
>  smt_wct=3
>  smb_vwv[ 0]=11148 (0x2B8C)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=33 fnum=11148 (numopen=1)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d428a0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8e.tmp (numopen=0) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11148 (4 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21833
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2408 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=21890
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 44 00 2E  00 74 00 6D 00 70 00 00  .f.8.D.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=21890
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 140
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x8c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2409 of length 144 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21961
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4352 (0x1100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=57
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 45 00 2E  .s.\.p.r .f.8.E..
>  [030] 00 74 00 6D 00 70 00 00  00                       .t.m.p.. .
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = tamme7/Templates/prf8E.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Templates/prf8E.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7055, fnum = 11151 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8e.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x0 access_mask=0x110080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x110080
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d43140
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x110080, open_access_mask = 0x110080
>[2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87)
>  check_open_rights: file tamme7/templates/prf8e.tmp requesting 0x110080 returning 0x10000 (NT_STATUS_ACCESS_DENIED)
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file(439)
>  open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8e.tmp read=No write=No (numopen=5)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3109)
>  create_file_unixpath: info=1
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3372)
>  create_file: info=1
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10,  5] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreate_and_X: fnum = 11151, open name = tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=135
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=21961
>  smt_wct=42
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=36608 (0x8F00)
>  smb_vwv[ 3]=  299 (0x12B)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=60197 (0xEB25)
>  smb_vwv[ 7]=38983 (0x9847)
>  smb_vwv[ 8]=49829 (0xC2A5)
>  smb_vwv[ 9]=    1 (0x1)
>  smb_vwv[10]=47931 (0xBB3B)
>  smb_vwv[11]=10781 (0x2A1D)
>  smb_vwv[12]=51607 (0xC997)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=60197 (0xEB25)
>  smb_vwv[15]=38983 (0x9847)
>  smb_vwv[16]=49829 (0xC2A5)
>  smb_vwv[17]=    1 (0x1)
>  smb_vwv[18]=60197 (0xEB25)
>  smb_vwv[19]=38983 (0x9847)
>  smb_vwv[20]=49829 (0xC2A5)
>  smb_vwv[21]=32769 (0x8001)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]= 4096 (0x1000)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=  384 (0x180)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=    0 (0x0)
>  smb_vwv[32]= 1792 (0x700)
>  smb_vwv[33]=    0 (0x0)
>  smb_vwv[34]=    0 (0x0)
>  smb_vwv[35]=    0 (0x0)
>  smb_vwv[36]=    0 (0x0)
>  smb_vwv[37]=    0 (0x0)
>  smb_vwv[38]=    0 (0x0)
>  smb_vwv[39]=    0 (0x0)
>  smb_vwv[40]=    0 (0x0)
>  smb_vwv[41]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2410 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22018
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 44 00 2E  00 74 00 6D 00 70 00 00  .f.8.D.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22018
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 72
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x48
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2411 of length 76 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22089
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 8F 2B EC 03                              ....+.. 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3867)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = 11151) level=1004 call=7 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22089
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2412 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22146
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 44 00 2E  00 74 00 6D 00 70 00 00  .f.8.D.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22146
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2413 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22210
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 44 00 2E  00 74 00 6D 00 70 00 00  .f.8.D.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8d.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22210
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2414 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22274
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 65 00 78  .l.a.t.e .s.\.e.x
>  [030] 00 63 00 65 00 6C 00 2E  00 78 00 6C 00 73 00 00  .c.e.l.. .x.l.s..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/excel.xls"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL.XLS]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/excel.xls, dirpath = tamme7/templates, start = excel.xls
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file excel.xls
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4037)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/excel.xls failed (No such file or directory)
>[2009/02/25 11:19:10,  3] smbd/error.c:reply_unix_error(154)
>  unix_error_packet: error string = No such file or directory
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22274
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2415 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22338
>  smt_wct=3
>  smb_vwv[ 0]=11149 (0x2B8D)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=-1 fnum=11149 (numopen=5)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8d.tmp (numopen=4) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11149 (4 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22338
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 152
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x98
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2416 of length 156 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=152
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22338
>  smt_wct=1
>  smb_vwv[ 0]=   22 (0x16)
>  smb_bcc=115
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 04 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 44 00 2E  .s.\.p.r .f.8.D..
>  [030] 00 74 00 6D 00 70 00 00  00 04 00 5C 00 74 00 61  .t.m.p.. ...\.t.a
>  [040] 00 6D 00 6D 00 65 00 37  00 5C 00 54 00 65 00 6D  .m.m.e.7 .\.T.e.m
>  [050] 00 70 00 6C 00 61 00 74  00 65 00 73 00 5C 00 65  .p.l.a.t .e.s.\.e
>  [060] 00 78 00 63 00 65 00 6C  00 2E 00 78 00 6C 00 73  .x.c.e.l ...x.l.s
>  [070] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBmv (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_mv(6065)
>  reply_mv : tamme7/Templates/prf8D.tmp -> tamme7/Templates/excel.xls
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8D.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8D.TMP] -> [tamme7/templates/prf8d.tmp]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/excel.xls"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/EXCEL.XLS]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/excel.xls, dirpath = tamme7/templates, start = excel.xls
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled excel.xls ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component excel.xls (len 9) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file excel.xls
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5815)
>  rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8d.tmp, newname = tamme7/templates/excel.xls, last_component_dest = excel.xls, is_8_3 = 0
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7056, fnum = 11152 (5 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8d.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8d.tmp, after mapping access_mask=0x10000
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42e90
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000
>[2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87)
>  check_open_rights: file tamme7/templates/prf8d.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED)
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file(439)
>  open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8d.tmp read=No write=No (numopen=5)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d43f30
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals_fsp(5650)
>  rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8d.tmp -> tamme7/templates/excel.xls
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8d.tmp
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/excel.xls
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/excel.xls
>[2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408)
>  rename_open_files: renaming file fnum 11152 (file_id 822:522cab) from tamme7/templates/prf8d.tmp -> tamme7/templates/excel.xls
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AB2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d445b0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AB2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/excel.xls (numopen=4) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11152 (4 used)
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5859)
>  rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8d.tmp -> tamme7/templates/excel.xls
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22338
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2417 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22402
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 46 00 2E  00 74 00 6D 00 70 00 00  .f.8.F.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22402
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2418 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22466
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 46 00 2E  00 74 00 6D 00 70 00 00  .f.8.F.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22466
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2419 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22530
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 46 00 2E  00 74 00 6D 00 70 00 00  .f.8.F.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22530
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2420 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22594
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 46 00 2E  00 74 00 6D 00 70 00 00  .f.8.F.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8f.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Mon Mar 31 15:00:00 2003
>   access: Wed Feb 25 11:19:10 2009
>   write: Mon Mar 31 15:00:00 2003
>   change: Mon Mar 31 15:00:00 2003
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22594
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 E0 23  0E 7D F7 C2 01 00 3B BB  .......# .}....;.
>  [010] 1D 2A 97 C9 01 00 E0 23  0E 7D F7 C2 01 00 E0 23  .*.....# .}.....#
>  [020] 0E 7D F7 C2 01 80 00 00  00 00 00 00 00           .}...... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 132
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x84
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2421 of length 136 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=132
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22658
>  smt_wct=15
>  smb_vwv[ 0]=   64 (0x40)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   64 (0x40)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=67
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 61 00 6D  .l.a.t.e .s.\.a.m
>  [030] 00 69 00 70 00 72 00 6F  00 2E 00 73 00 61 00 6D  .i.p.r.o ...s.a.m
>  [040] 00 00 00                                          ... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/amipro.sam"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/AMIPRO.SAM]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/amipro.sam, dirpath = tamme7/templates, start = amipro.sam
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file amipro.sam
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4037)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/amipro.sam failed (No such file or directory)
>[2009/02/25 11:19:10,  3] smbd/error.c:reply_unix_error(154)
>  unix_error_packet: error string = No such file or directory
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22658
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2422 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22722
>  smt_wct=3
>  smb_vwv[ 0]=11150 (0x2B8E)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=-1 fnum=11150 (numopen=4)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8f.tmp (numopen=3) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11150 (3 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22722
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 154
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x9a
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2423 of length 158 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=154
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22722
>  smt_wct=1
>  smb_vwv[ 0]=   22 (0x16)
>  smb_bcc=117
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 04 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 46 00 2E  .s.\.p.r .f.8.F..
>  [030] 00 74 00 6D 00 70 00 00  00 04 49 5C 00 74 00 61  .t.m.p.. ..I\.t.a
>  [040] 00 6D 00 6D 00 65 00 37  00 5C 00 54 00 65 00 6D  .m.m.e.7 .\.T.e.m
>  [050] 00 70 00 6C 00 61 00 74  00 65 00 73 00 5C 00 61  .p.l.a.t .e.s.\.a
>  [060] 00 6D 00 69 00 70 00 72  00 6F 00 2E 00 73 00 61  .m.i.p.r .o...s.a
>  [070] 00 6D 00 00 00                                    .m... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBmv (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_mv(6065)
>  reply_mv : tamme7/Templates/prf8F.tmp -> tamme7/Templates/amipro.sam
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8F.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8F.TMP] -> [tamme7/templates/prf8f.tmp]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/amipro.sam"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/AMIPRO.SAM]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/amipro.sam, dirpath = tamme7/templates, start = amipro.sam
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled amipro.sam ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component amipro.sam (len 10) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file amipro.sam
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5815)
>  rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8f.tmp, newname = tamme7/templates/amipro.sam, last_component_dest = amipro.sam, is_8_3 = 0
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7057, fnum = 11153 (4 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8f.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8f.tmp, after mapping access_mask=0x10000
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42e90
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000
>[2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87)
>  check_open_rights: file tamme7/templates/prf8f.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED)
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file(439)
>  open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8f.tmp read=No write=No (numopen=4)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d43f30
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals_fsp(5650)
>  rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8f.tmp -> tamme7/templates/amipro.sam
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8f.tmp
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/amipro.sam
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/amipro.sam
>[2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408)
>  rename_open_files: renaming file fnum 11153 (file_id 822:522cad) from tamme7/templates/prf8f.tmp -> tamme7/templates/amipro.sam
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AD2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d445b0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AD2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/amipro.sam (numopen=3) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11153 (3 used)
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5859)
>  rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8f.tmp -> tamme7/templates/amipro.sam
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=22722
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 184
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xb8
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2424 of length 188 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=184
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22786
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=25088 (0x6200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=101
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 49 00 6E 00 74 00 65  .a.m.s.\ .I.n.t.e
>  [040] 00 72 00 6E 00 65 00 74  00 20 00 45 00 78 00 70  .r.n.e.t . .E.x.p
>  [050] 00 6C 00 6F 00 72 00 65  00 72 00 2E 00 6C 00 6E  .l.o.r.e .r...l.n
>  [060] 00 6B 00 00 00                                    .k... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/Internet Explorer.lnk
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/Internet Explorer.lnk"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/INTERNET EXPLORER.LNK]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/Internet Explorer.lnk, dirpath = tamme7/start menu/programs, start = Internet Explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled Internet Explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component Internet Explorer.lnk (len 21) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled internet explorer.lnk ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component internet explorer.lnk (len 21) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file internet explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/internet explorer.lnk
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/internet explorer.lnk for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22786
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 164
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa4
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2425 of length 168 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=164
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22857
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=19968 (0x4E00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=81
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 64 00 65 00 73 00 6B  .a.m.s.\ .d.e.s.k
>  [040] 00 74 00 6F 00 70 00 2E  00 69 00 6E 00 69 00 00  .t.o.p.. .i.n.i..
>  [050] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/desktop.ini
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/desktop.ini"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/START MENU/PROGRAMS/DESKTOP.INI]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS] -> [tamme7/start menu/programs]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/start menu/programs/desktop.ini, dirpath = tamme7/start menu/programs, start = desktop.ini
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled desktop.ini ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/desktop.ini
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/desktop.ini for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22857
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2426 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22915
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 31 00 2E 00 74 00 6D  00 70 00 00 00           .1...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf91.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf91.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF91.TMP] -> [tamme7/start menu/programs/prf91.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf91.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf91.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=22915
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2427 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22984
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 45 00 2E  00 74 00 6D 00 70 00 00  .f.8.E.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=22984
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2428 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23048
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 45 00 2E  00 74 00 6D 00 70 00 00  .f.8.E.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23048
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2429 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23112
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 45 00 2E  00 74 00 6D 00 70 00 00  .f.8.E.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23112
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 130
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x82
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2430 of length 134 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=130
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23176
>  smt_wct=15
>  smb_vwv[ 0]=   62 (0x3E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   62 (0x3E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=65
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 70 00 72  .l.a.t.e .s.\.p.r
>  [030] 00 66 00 38 00 45 00 2E  00 74 00 6D 00 70 00 00  .f.8.E.. .t.m.p..
>  [040] 00                                                . 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d41240
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4057)
>  call_trans2qfilepathinfo tamme7/templates/prf8e.tmp (fnum = -1) level=1004 call=5 total_data=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/trans2.c:call_trans2qfilepathinfo(4299)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/02/25 11:19:10,  5] smbd/trans2.c:call_trans2qfilepathinfo(4309)
>  SMB_QFBI - create: Tue Dec 17 08:48:18 2002
>   access: Wed Feb 25 11:19:10 2009
>   write: Tue Dec 17 08:48:18 2002
>   change: Tue Dec 17 08:48:18 2002
>   mode: 80
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(840)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/02/25 11:19:10,  9] smbd/trans2.c:send_trans2_replies(842)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23176
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 00 00 00 25 EB  47 98 A5 C2 01 00 3B BB  ......%. G.....;.
>  [010] 1D 2A 97 C9 01 00 25 EB  47 98 A5 C2 01 00 25 EB  .*....%. G.....%.
>  [020] 47 98 A5 C2 01 80 00 00  00 00 00 00 00           G....... .....
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 134
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x86
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2431 of length 138 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=134
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23240
>  smt_wct=15
>  smb_vwv[ 0]=   66 (0x42)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   66 (0x42)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=69
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 74 00 61 00 6D  ........ .\.t.a.m
>  [010] 00 6D 00 65 00 37 00 5C  00 54 00 65 00 6D 00 70  .m.e.7.\ .T.e.m.p
>  [020] 00 6C 00 61 00 74 00 65  00 73 00 5C 00 41 00 43  .l.a.t.e .s.\.A.C
>  [030] 00 43 00 45 00 53 00 53  00 39 00 2E 00 4D 00 44  .C.E.S.S .9...M.D
>  [040] 00 42 00 00 00                                    .B... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtrans2 (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (257, 81) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_nt_user_token(528)
>  NT user token of user S-1-5-21-2130248414-1056217400-931698689-1514
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2130248414-1056217400-931698689-1514
>  SID[  1]: S-1-5-21-2130248414-1056217400-931698689-1122
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-96
>  SID[  6]: S-1-5-21-2130248414-1056217400-931698689-513
>  SID[  7]: S-1-22-2-81
>  SID[  8]: S-1-22-2-1021
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/02/25 11:19:10,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 257
>  Primary group is 81 and contains 3 supplementary groups
>  Group[  0]: 81
>  Group[  1]: 96
>  Group[  2]: 1021
>[2009/02/25 11:19:10,  5] smbd/uid.c:change_to_user(298)
>  change_to_user uid=(0,257) gid=(0,81)
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(3943)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/ACCESS9.MDB"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/ACCESS9.MDB]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/ACCESS9.MDB, dirpath = tamme7/templates, start = ACCESS9.MDB
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled ACCESS9.MDB ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component ACCESS9.MDB (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled ACCESS9.MDB ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component ACCESS9.MDB (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled access9.mdb ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component access9.mdb (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file access9.mdb
>[2009/02/25 11:19:10,  3] smbd/trans2.c:call_trans2qfilepathinfo(4037)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of tamme7/templates/access9.mdb failed (No such file or directory)
>[2009/02/25 11:19:10,  3] smbd/error.c:reply_unix_error(154)
>  unix_error_packet: error string = No such file or directory
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/trans2.c(4038) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1772
>  smb_uid=101
>  smb_mid=23240
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2432 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23304
>  smt_wct=3
>  smb_vwv[ 0]=11151 (0x2B8F)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=-1 fnum=11151 (numopen=3)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/prf8e.tmp (numopen=2) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11151 (2 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23304
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 156
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x9c
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2433 of length 160 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=156
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23304
>  smt_wct=1
>  smb_vwv[ 0]=   22 (0x16)
>  smb_bcc=119
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 04 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 54 00 65 00 6D 00 70  00 6C 00 61 00 74 00 65  .T.e.m.p .l.a.t.e
>  [020] 00 73 00 5C 00 70 00 72  00 66 00 38 00 45 00 2E  .s.\.p.r .f.8.E..
>  [030] 00 74 00 6D 00 70 00 00  00 04 00 5C 00 74 00 61  .t.m.p.. ...\.t.a
>  [040] 00 6D 00 6D 00 65 00 37  00 5C 00 54 00 65 00 6D  .m.m.e.7 .\.T.e.m
>  [050] 00 70 00 6C 00 61 00 74  00 65 00 73 00 5C 00 41  .p.l.a.t .e.s.\.A
>  [060] 00 43 00 43 00 45 00 53  00 53 00 39 00 2E 00 4D  .C.C.E.S .S.9...M
>  [070] 00 44 00 42 00 00 00                              .D.B... 
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBmv (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_mv(6065)
>  reply_mv : tamme7/Templates/prf8E.tmp -> tamme7/Templates/ACCESS9.MDB
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/prf8E.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES/PRF8E.TMP] -> [tamme7/templates/prf8e.tmp]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Templates/ACCESS9.MDB"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(235)
>  stat_cache_lookup: lookup failed for name [TAMME7/TEMPLATES/ACCESS9.MDB]
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/TEMPLATES] -> [tamme7/templates]
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(293)
>  unix_convert begin: name = tamme7/templates/ACCESS9.MDB, dirpath = tamme7/templates, start = ACCESS9.MDB
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled ACCESS9.MDB ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component ACCESS9.MDB (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled ACCESS9.MDB ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component ACCESS9.MDB (len 11) ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled(249)
>  is_mangled access9.mdb ?
>[2009/02/25 11:19:10, 10] smbd/mangle_hash2.c:is_mangled_component(188)
>  is_mangled_component access9.mdb (len 11) ?
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(543)
>  New file access9.mdb
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5815)
>  rename_internals: case_sensitive = 0, case_preserve = 0, short case preserve = 0, directory = tamme7/templates/prf8e.tmp, newname = tamme7/templates/access9.mdb, last_component_dest = ACCESS9.MDB, is_8_3 = 0
>[2009/02/25 11:19:10,  5] smbd/files.c:file_new(121)
>  allocated file structure 7058, fnum = 11154 (3 used)
>[2009/02/25 11:19:10,  3] smbd/dosmode.c:unix_mode(124)
>  unix_mode(tamme7/templates/prf8e.tmp) returning 0666
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1401)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, dos_attrs=0x0 access_mask=0x10000 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0666 oplock_request=0
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file_ntcreate_internal(1576)
>  open_file_ntcreate: fname=tamme7/templates/prf8e.tmp, after mapping access_mask=0x10000
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42ea0
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10, 10] smbd/open.c:delay_for_oplocks(907)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/02/25 11:19:10,  4] smbd/open.c:open_file_ntcreate_internal(1835)
>  calling open_file with flags=0x0 flags2=0x0 mode=0666, access_mask = 0x10000, open_access_mask = 0x10000
>[2009/02/25 11:19:10, 10] smbd/open.c:check_open_rights(87)
>  check_open_rights: file tamme7/templates/prf8e.tmp requesting 0x10000 returning 0x10000 (NT_STATUS_ACCESS_DENIED)
>[2009/02/25 11:19:10, 10] smbd/open.c:open_file(439)
>  open_file: overrode ACCESS_DENIED on file tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  2] smbd/open.c:open_file(506)
>  tamme7 opened file tamme7/templates/prf8e.tmp read=No write=No (numopen=3)
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(359)
>  dos_mode: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode_from_sbuf(170)
>  dos_mode_from_sbuf returning 
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1876)
>  is_in_path: tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10,  8] lib/util.c:is_in_path(1900)
>  is_in_path: match not found
>[2009/02/25 11:19:10,  8] smbd/dosmode.c:dos_mode(399)
>  dos_mode returning 
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d43f40
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals_fsp(5650)
>  rename_internals_fsp: succeeded doing rename on tamme7/templates/prf8e.tmp -> tamme7/templates/access9.mdb
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x4, filter=0x1, path=/samba/profiles/tamme7/templates/prf8e.tmp
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x5, filter=0x1, path=/samba/profiles/tamme7/templates/access9.mdb
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x44, path=/samba/profiles/tamme7/templates/access9.mdb
>[2009/02/25 11:19:10, 10] smbd/reply.c:rename_open_files(5408)
>  rename_open_files: renaming file fnum 11154 (file_id 822:522cae) from tamme7/templates/prf8e.tmp -> tamme7/templates/access9.mdb
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000AE2C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d445c0
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000AE2C
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/templates/access9.mdb (numopen=2) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11154 (2 used)
>[2009/02/25 11:19:10,  3] smbd/reply.c:rename_internals(5859)
>  rename_internals: Error NT_STATUS_OK rename tamme7/templates/prf8e.tmp -> tamme7/templates/access9.mdb
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x7
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23304
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2434 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23368
>  smt_wct=3
>  smb_vwv[ 0]=11147 (0x2B8B)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=32 fnum=11147 (numopen=2)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Wed Feb 25 11:18:04 2009
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B62C
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:18:04 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:04 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48428
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B62C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:18:04 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf92.tmp (numopen=1) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11147 (1 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23368
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2435 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23432
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 32 00 2E 00 74 00 6D  00 70 00 00 00           .2...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP] -> [tamme7/start menu/programs/prf92.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf92.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23432
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 41
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x29
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2436 of length 45 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23496
>  smt_wct=3
>  smb_vwv[ 0]=11146 (0x2B8A)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBclose (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10,  3] smbd/reply.c:reply_close(4338)
>  close fd=28 fnum=11146 (numopen=1)
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Thu Jan  1 02:59:59 1970
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d42830
>[2009/02/25 11:19:10,  6] smbd/close.c:set_close_write_time(450)
>  close_write_time: Wed Feb 25 11:18:08 2009
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B52C
>[2009/02/25 11:19:10,  6] smbd/trans2.c:smb_set_file_time(4912)
>  smb_set_file_time: actime: Wed Feb 25 11:19:10 2009
>   smb_set_file_time: modtime: Wed Feb 25 11:18:08 2009
>   smb_set_file_time: setting pending modtime to Wed Feb 25 11:18:08 2009
>  
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48428
>[2009/02/25 11:19:10, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 2208000000000000B52C
>[2009/02/25 11:19:10, 10] smbd/trans2.c:smb_set_file_time(4955)
>  smb_set_file_time: setting utimes to modified values.
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(580)
>  file_ntime: actime: Wed Feb 25 11:19:10 2009
>[2009/02/25 11:19:10,  6] smbd/dosmode.c:file_ntimes(582)
>  file_ntime: modtime: Wed Feb 25 11:18:08 2009
>[2009/02/25 11:19:10, 10] smbd/notify_internal.c:notify_trigger(593)
>  notify_trigger called action=0x3, filter=0x10, path=/samba/profiles/tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10,  2] smbd/close.c:close_normal_file(594)
>  tamme7 closed file tamme7/start menu/programs/prf93.tmp (numopen=0) NT_STATUS_OK
>[2009/02/25 11:19:10,  5] smbd/files.c:file_free(428)
>  freed files structure 11146 (0 used)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23496
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2437 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23560
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 33 00 2E 00 74 00 6D  00 70 00 00 00           .3...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP] -> [tamme7/start menu/programs/prf93.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf93.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23560
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2438 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23624
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 32 00 2E 00 74 00 6D  00 70 00 00 00           .2...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf92.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf92.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF92.TMP] -> [tamme7/start menu/programs/prf92.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf92.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf92.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23624
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 160
>[2009/02/25 11:19:10,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0xa0
>[2009/02/25 11:19:10,  3] smbd/process.c:process_smb(1554)
>  Transaction 2439 of length 164 (0 toread)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=160
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23683
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=18944 (0x4A00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=  256 (0x100)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=77
>[2009/02/25 11:19:10, 10] lib/util.c:dump_data(2233)
>  [000] 00 5C 00 74 00 61 00 6D  00 6D 00 65 00 37 00 5C  .\.t.a.m .m.e.7.\
>  [010] 00 53 00 74 00 61 00 72  00 74 00 20 00 4D 00 65  .S.t.a.r .t. .M.e
>  [020] 00 6E 00 75 00 5C 00 50  00 72 00 6F 00 67 00 72  .n.u.\.P .r.o.g.r
>  [030] 00 61 00 6D 00 73 00 5C  00 70 00 72 00 66 00 39  .a.m.s.\ .p.r.f.9
>  [040] 00 33 00 2E 00 74 00 6D  00 70 00 00 00           .3...t.m .p...
>[2009/02/25 11:19:10,  3] smbd/process.c:switch_message(1378)
>  switch message SMBntcreateX (pid 12929) conn 0xb8d40358
>[2009/02/25 11:19:10,  4] smbd/uid.c:change_to_user(213)
>  change_to_user: Skipping user change - already user
>[2009/02/25 11:19:10, 10] smbd/nttrans.c:reply_ntcreate_and_X(454)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3183)
>  create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/Start Menu/Programs/prf93.tmp
>[2009/02/25 11:19:10,  5] smbd/filename.c:unix_convert(146)
>  unix_convert called on file "tamme7/Start Menu/Programs/prf93.tmp"
>[2009/02/25 11:19:10, 10] smbd/statcache.c:stat_cache_lookup(274)
>  stat_cache_lookup: lookup succeeded for name [TAMME7/START MENU/PROGRAMS/PRF93.TMP] -> [tamme7/start menu/programs/prf93.tmp]
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2803)
>  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = tamme7/start menu/programs/prf93.tmp
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(2859)
>  create_file_unixpath: open file tamme7/start menu/programs/prf93.tmp for delete ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file_unixpath(3126)
>  create_file_unixpath: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10, 10] smbd/open.c:create_file(3384)
>  create_file: NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  3] smbd/error.c:error_packet_set(61)
>  error packet at smbd/nttrans.c(498) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:10,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0xa2
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=101
>  smb_mid=23683
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:15, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 39
>[2009/02/25 11:19:15,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x27
>[2009/02/25 11:19:15,  3] smbd/process.c:process_smb(1554)
>  Transaction 2440 of length 43 (0 toread)
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(655)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23747
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:15,  3] smbd/process.c:switch_message(1378)
>  switch message SMBulogoffX (pid 12929) conn 0x0
>[2009/02/25 11:19:15,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:19:15,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:15,  3] smbd/reply.c:reply_ulogoffX(1972)
>  ulogoffX vuid=100
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(655)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23747
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:19:15, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 35
>[2009/02/25 11:19:15,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x23
>[2009/02/25 11:19:15,  3] smbd/process.c:process_smb(1554)
>  Transaction 2441 of length 39 (0 toread)
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23811
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:19:15,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtdis (pid 12929) conn 0xb8d24c48
>[2009/02/25 11:19:15,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:19:15,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:15,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:19:15,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:15,  3] smbd/service.c:close_cnum(1315)
>  kivastik (192.168.5.129) closed connection to service IPC$
>[2009/02/25 11:19:15,  3] smbd/connection.c:yield_connection(31)
>  Yielding connection to IPC$
>[2009/02/25 11:19:15, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 81320000010000004950
>[2009/02/25 11:19:15, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d48a68
>[2009/02/25 11:19:15, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 81320000010000004950
>[2009/02/25 11:19:15,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:19:15,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:19:15,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:19:15,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=23811
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:20:04, 10] lib/events.c:run_events(240)
>  Running event "smbd_idle_event_handler" b8d3ec58
>[2009/02/25 11:20:04, 10] lib/events.c:timed_event_destructor(55)
>  Destroying timed event b8d3ec58 "smbd_idle_event_handler"
>[2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(592)
>  smbd_idle_event_handler: idle_evt(deadtime) (nil) called
>[2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(603)
>  smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled
>[2009/02/25 11:20:04, 10] lib/events.c:_event_add_timed(120)
>  Added timed event "smbd_idle_event_handler": b8d486c0
>[2009/02/25 11:20:04, 10] lib/events.c:run_events(240)
>  Running event "smbd_idle_event_handler" b8d3ef08
>[2009/02/25 11:20:04, 10] lib/events.c:timed_event_destructor(55)
>  Destroying timed event b8d3ef08 "smbd_idle_event_handler"
>[2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(592)
>  smbd_idle_event_handler: idle_evt(housekeeping) (nil) called
>[2009/02/25 11:20:04,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:04,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:04,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:04,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:04, 10] smbd/process.c:smbd_idle_event_handler(603)
>  smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled
>[2009/02/25 11:20:04, 10] lib/events.c:_event_add_timed(120)
>  Added timed event "smbd_idle_event_handler": b8d30f98
>[2009/02/25 11:20:12, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 35
>[2009/02/25 11:20:12,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x23
>[2009/02/25 11:20:12,  3] smbd/process.c:process_smb(1554)
>  Transaction 2442 of length 39 (0 toread)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23875
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:20:12,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtdis (pid 12929) conn 0xb8d41240
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12,  1] smbd/service.c:close_cnum(1315)
>  kivastik (192.168.5.129) closed connection to service profile
>[2009/02/25 11:20:12,  3] smbd/connection.c:yield_connection(31)
>  Yielding connection to profile
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 81320000030000007072
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d3d2f8
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 81320000030000007072
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23875
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:20:12, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 39
>[2009/02/25 11:20:12,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x27
>[2009/02/25 11:20:12,  3] smbd/process.c:process_smb(1554)
>  Transaction 2443 of length 43 (0 toread)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(655)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23939
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:20:12,  3] smbd/process.c:switch_message(1378)
>  switch message SMBulogoffX (pid 12929) conn 0x0
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 49442F3400
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d41240
>[2009/02/25 11:20:12,  2] smbd/utmp.c:sys_utmp_update(437)
>  utmp_update: uname:/var/run/utmpx wname:/var/log/wtmpx
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 49442F3400
>[2009/02/25 11:20:12,  3] smbd/reply.c:reply_ulogoffX(1972)
>  ulogoffX vuid=101
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(655)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=23939
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2009/02/25 11:20:12, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187)
>  got smb length of 35
>[2009/02/25 11:20:12,  6] smbd/process.c:process_smb(1551)
>  got message type 0x0 of len 0x23
>[2009/02/25 11:20:12,  3] smbd/process.c:process_smb(1554)
>  Transaction 2444 of length 39 (0 toread)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=24003
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:20:12,  3] smbd/process.c:switch_message(1378)
>  switch message SMBtdis (pid 12929) conn 0xb8d40358
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12,  1] smbd/service.c:close_cnum(1315)
>  kivastik (192.168.5.129) closed connection to service profile
>[2009/02/25 11:20:12,  3] smbd/connection.c:yield_connection(31)
>  Yielding connection to profile
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 81320000020000007072
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d41c10
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 81320000020000007072
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(645)
>[2009/02/25 11:20:12,  5] lib/util.c:show_msg(655)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=24003
>  smt_wct=0
>  smb_bcc=0
>[2009/02/25 11:20:12,  5] lib/util_sock.c:read_socket_with_timeout(928)
>  read_socket_with_timeout: blocking read. EOF from client.
>[2009/02/25 11:20:12, 10] smbd/process.c:receive_smb_raw_talloc(280)
>  receive_smb_raw: NT_STATUS_END_OF_FILE
>[2009/02/25 11:20:12,  3] smbd/process.c:smbd_process(1930)
>  receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
>[2009/02/25 11:20:12,  5] libsmb/namecache.c:namecache_shutdown(81)
>  namecache_shutdown: netbios namecache closed successfully.
>[2009/02/25 11:20:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_nt_user_token(522)
>  NT user token: (NULL)
>[2009/02/25 11:20:12,  5] auth/token_util.c:debug_unix_user_token(548)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/02/25 11:20:12,  5] smbd/uid.c:change_to_root_user(313)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/02/25 11:20:12,  3] smbd/connection.c:yield_connection(31)
>  Yielding connection to 
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100)
>  Locking key 81320000FFFFFFFF0000
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129)
>  Allocated locked data 0x0xb8d41c10
>[2009/02/25 11:20:12, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42)
>  Unlocking key 81320000FFFFFFFF0000
>[2009/02/25 11:20:12,  3] smbd/server.c:exit_server_common(960)
>  Server exit (normal exit)

Actions: View

Attachments on bug 6083: 3955