[2004/03/17 15:37:41, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/03/17 15:37:41, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:41, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:41, 3] smbd/process.c:process_smb(890) Transaction 1199111 of length 76 [2004/03/17 15:37:41, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:41, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=11719 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:41, 10] lib/util.c:dump_data(1830) [000] 00 73 00 73 1D EC 03 .s.s... [2004/03/17 15:37:41, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:41, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:41, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:41, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:41, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:41, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/03/17 15:37:41, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7539) level=1004 call=7 total_data=0 [2004/03/17 15:37:41, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:41, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:41, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:41, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:41, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:39 2004 access: Wed Mar 17 15:37:39 2004 write: Wed Mar 17 15:37:39 2004 change: Wed Mar 17 15:37:39 2004 mode: 20 [2004/03/17 15:37:41, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:41, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:41, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:41, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:41, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:41, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:41, 3] smbd/process.c:process_smb(890) Transaction 1199112 of length 63 [2004/03/17 15:37:41, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:41, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=11783 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7539 (0x1D73) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 24 (0x18) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 24 (0x18) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:41, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:41, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:41, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=24 unlocked for file fundscore1003.xls [2004/03/17 15:37:41, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File fundscore1003.xls, offset = 0, count = 24, type = READ [2004/03/17 15:37:41, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 24 [2004/03/17 15:37:41, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 36 12 0 24 0 [2004/03/17 15:37:41, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 36 12 0 24 0 [2004/03/17 15:37:41, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:41, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=24 unlocked for file fundscore1003.xls [2004/03/17 15:37:41, 10] smbd/fileio.c:read_file(101) read_file (fundscore1003.xls): pos = 0, size = 24, returned 24 [2004/03/17 15:37:41, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7539 max=24 nread=24 [2004/03/17 15:37:41, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:41, 5] lib/util.c:show_msg(466) size=83 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=11783 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 24 (0x18) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=24 [2004/03/17 15:37:41, 10] lib/util.c:dump_data(1830) [000] D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 ........ [2004/03/17 15:37:41, 6] lib/util_sock.c:write_socket(407) write_socket(15,87) [2004/03/17 15:37:41, 6] lib/util_sock.c:write_socket(410) write_socket(15,87) wrote 87 [2004/03/17 15:37:41, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:41, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:41, 3] smbd/process.c:process_smb(890) Transaction 1199113 of length 45 [2004/03/17 15:37:41, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:41, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=11847 smt_wct=3 smb_vwv[ 0]= 7539 (0x1D73) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:41, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:41, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:41, 3] smbd/reply.c:reply_close(2567) close fd=36 fnum=7539 (numopen=3) [2004/03/17 15:37:41, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 2 [2004/03/17 15:37:41, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 44556, dev = 0x811, inode = 5275849 [2004/03/17 15:37:41, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:41, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:41, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x42, desired_access = 0x2019f, port = 0x0, type= 0x0, file_id = 44555, dev = 0x811, inode = 5275849 [2004/03/17 15:37:41, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 1 for file fundscore1003.xls [2004/03/17 15:37:41, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=2) [2004/03/17 15:37:41, 5] smbd/files.c:file_free(385) freed files structure 7539 (17 used) [2004/03/17 15:37:41, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:41, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=11847 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:41, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:41, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:43, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 108 [2004/03/17 15:37:43, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x6c [2004/03/17 15:37:43, 3] smbd/process.c:process_smb(890) Transaction 1199114 of length 112 [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=108 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=11911 smt_wct=15 smb_vwv[ 0]= 40 (0x28) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 40 (0x28) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=43 [2004/03/17 15:37:43, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EC 03 00 00 00 00 5C 00 57 00 49 00 4E ........ .\.W.I.N [010] 00 44 00 4F 00 57 00 53 00 5C 00 77 00 69 00 6E .D.O.W.S .\.w.i.n [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... [2004/03/17 15:37:43, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:43, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:43, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:43, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\win.ini" [2004/03/17 15:37:43, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/win.ini] [2004/03/17 15:37:43, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [WINDOWS/WIN.INI] [2004/03/17 15:37:43, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS] -> [WINDOWS] [2004/03/17 15:37:43, 5] smbd/statcache.c:stat_cache_add(178) stat_cache_add: Added entry WINDOWS/WIN.INI -> WINDOWS/win.ini [2004/03/17 15:37:43, 5] smbd/filename.c:unix_convert(183) conversion finished WINDOWS/win.ini -> WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINDOWS/win.ini] [2004/03/17 15:37:43, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo WINDOWS/win.ini (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:43, 8] smbd/dosmode.c:dos_mode(122) dos_mode: WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:43, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Mon Feb 23 16:30:58 2004 access: Wed Mar 17 15:21:56 2004 write: Mon Feb 23 16:30:58 2004 change: Mon Feb 23 16:30:58 2004 mode: 20 [2004/03/17 15:37:43, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:43, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:43, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 118 [2004/03/17 15:37:43, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x76 [2004/03/17 15:37:43, 3] smbd/process.c:process_smb(890) Transaction 1199115 of length 122 [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=118 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=11975 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8192 (0x2000) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=35 [2004/03/17 15:37:43, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 .\.W.I.N .D.O.W.S [010] 00 5C 00 77 00 69 00 6E 00 2E 00 69 00 6E 00 69 .\.w.i.n ...i.n.i [020] 00 00 00 ... [2004/03/17 15:37:43, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:43, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:43, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:43, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:43, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:43, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20089, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:43, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\win.ini" [2004/03/17 15:37:43, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/win.ini] [2004/03/17 15:37:43, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS/WIN.INI] -> [WINDOWS/win.ini] [2004/03/17 15:37:43, 3] smbd/dosmode.c:unix_mode(110) unix_mode(WINDOWS/win.ini) returning 0744 [2004/03/17 15:37:43, 5] smbd/files.c:file_new(122) allocated file structure 3444, fnum = 7540 (18 used) [2004/03/17 15:37:43, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = WINDOWS/win.ini, share_mode = 8040, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINDOWS/win.ini] [2004/03/17 15:37:43, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:43, 10] smbd/open.c:fd_open(45) fd_open: name WINDOWS/win.ini, flags = 00 mode = 0744, fd = 39. [2004/03/17 15:37:43, 2] smbd/open.c:open_file(240) BryanW opened file WINDOWS/win.ini read=Yes write=No (numopen=3) [2004/03/17 15:37:43, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file WINDOWS/win.ini, dev = 811, inode = 14942265, file_id = 44557 [2004/03/17 15:37:43, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file WINDOWS/win.ini, dev = 811, inode = 14942265, file_id = 44557, tv_sec = 4058c527, tv_usec = 83490 [2004/03/17 15:37:43, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file WINDOWS/win.ini. num_share_modes = 1 [2004/03/17 15:37:43, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44557, dev = 0x811, inode = 14942265 [2004/03/17 15:37:43, 8] smbd/dosmode.c:dos_mode(122) dos_mode: WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:43, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7540, open name = WINDOWS/win.ini [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=11975 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=29698 (0x7402) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=11261 (0x2BFD) smb_vwv[ 7]=23733 (0x5CB5) smb_vwv[ 8]=50170 (0xC3FA) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=55602 (0xD932) smb_vwv[11]=26079 (0x65DF) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=11261 (0x2BFD) smb_vwv[15]=23733 (0x5CB5) smb_vwv[16]=50170 (0xC3FA) smb_vwv[17]= 1 (0x1) smb_vwv[18]=11261 (0x2BFD) smb_vwv[19]=23733 (0x5CB5) smb_vwv[20]=50170 (0xC3FA) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=37120 (0x9100) smb_vwv[28]= 4 (0x4) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:43, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:43, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:43, 3] smbd/process.c:process_smb(890) Transaction 1199116 of length 63 [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12039 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7540 (0x1D74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1169 (0x491) smb_vwv[ 6]= 1169 (0x491) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 1169 (0x491) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:43, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:43, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:43, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=1169 unlocked for file WINDOWS/win.ini [2004/03/17 15:37:43, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File WINDOWS/win.ini, offset = 0, count = 1169, type = READ [2004/03/17 15:37:43, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 1169 [2004/03/17 15:37:43, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 39 12 0 1169 0 [2004/03/17 15:37:43, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 39 12 0 1169 0 [2004/03/17 15:37:43, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:43, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=1169 unlocked for file WINDOWS/win.ini [2004/03/17 15:37:43, 10] smbd/fileio.c:read_file(101) read_file (WINDOWS/win.ini): pos = 0, size = 1169, returned 1169 [2004/03/17 15:37:43, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7540 max=1169 nread=1169 [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=1228 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12039 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1169 (0x491) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=1169 [2004/03/17 15:37:43, 10] lib/util.c:dump_data(1830) [000] 3B 20 66 6F 72 20 31 36 2D 62 69 74 20 61 70 70 ; for 16 -bit app [010] 20 73 75 70 70 6F 72 74 0D 0A 5B 66 6F 6E 74 73 support ..[fonts [020] 5D 0D 0A 5B 65 78 74 65 6E 73 69 6F 6E 73 5D 0D ]..[exte nsions]. [030] 0A 5B 6D 63 69 20 65 78 74 65 6E 73 69 6F 6E 73 .[mci ex tensions [040] 5D 0D 0A 5B 66 69 6C 65 73 5D 0D 0A 5B 4D 61 69 ]..[file s]..[Mai [050] 6C 5D 0D 0A 4D 41 50 49 3D 31 0D 0A 43 4D 43 3D l]..MAPI =1..CMC= [060] 31 0D 0A 43 4D 43 44 4C 4C 4E 41 4D 45 33 32 3D 1..CMCDL LNAME32= [070] 6D 61 70 69 33 32 2E 64 6C 6C 0D 0A 43 4D 43 44 mapi32.d ll..CMCD [080] 4C 4C 4E 41 4D 45 3D 6D 61 70 69 2E 64 6C 6C 0D LLNAME=m api.dll. [090] 0A 4D 41 50 49 58 3D 31 0D 0A 4D 41 50 49 58 56 .MAPIX=1 ..MAPIXV [0A0] 45 52 3D 31 2E 30 2E 30 2E 31 0D 0A 4F 4C 45 4D ER=1.0.0 .1..OLEM [0B0] 65 73 73 61 67 69 6E 67 3D 31 0D 0A 5B 4D 43 49 essaging =1..[MCI [0C0] 20 45 78 74 65 6E 73 69 6F 6E 73 2E 42 41 4B 5D Extensi ons.BAK] [0D0] 0D 0A 61 73 66 3D 4D 50 45 47 56 69 64 65 6F 0D ..asf=MP EGVideo. [0E0] 0A 61 73 78 3D 4D 50 45 47 56 69 64 65 6F 0D 0A .asx=MPE GVideo.. [0F0] 69 76 66 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D ivf=MPEG Video..m [100] 33 75 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 3u=MPEGV ideo..mp [110] 32 76 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 2v=MPEGV ideo..mp [120] 33 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 76 3=MPEGVi deo..mpv [130] 32 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 77 61 78 2=MPEGVi deo..wax [140] 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 77 6D 3D 4D =MPEGVid eo..wm=M [150] 50 45 47 56 69 64 65 6F 0D 0A 77 6D 61 3D 4D 50 PEGVideo ..wma=MP [160] 45 47 56 69 64 65 6F 0D 0A 77 6D 76 3D 4D 50 45 EGVideo. .wmv=MPE [170] 47 56 69 64 65 6F 0D 0A 77 76 78 3D 4D 50 45 47 GVideo.. wvx=MPEG [180] 56 69 64 65 6F 0D 0A 5B 57 69 6E 5A 69 70 5D 0D Video..[ WinZip]. [190] 0A 4E 6F 74 65 2D 31 3D 54 68 69 73 20 73 65 63 .Note-1= This sec [1A0] 74 69 6F 6E 20 69 73 20 72 65 71 75 69 72 65 64 tion is required [1B0] 20 6F 6E 6C 79 20 74 6F 20 69 6E 73 74 61 6C 6C only to install [1C0] 20 74 68 65 20 6F 70 74 69 6F 6E 61 6C 20 57 69 the opt ional Wi [1D0] 6E 5A 69 70 20 49 6E 74 65 72 6E 65 74 20 42 72 nZip Int ernet Br [1E0] 6F 77 73 65 72 20 53 75 70 70 6F 72 74 20 62 75 owser Su pport bu [1F0] 69 6C 64 20 30 32 33 31 2E 0D 0A 4E 6F 74 65 2D ild 0231 ...Note- [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(407) write_socket(15,1232) [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(410) write_socket(15,1232) wrote 1232 [2004/03/17 15:37:43, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 126 [2004/03/17 15:37:43, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7e [2004/03/17 15:37:43, 3] smbd/process.c:process_smb(890) Transaction 1199117 of length 130 [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12103 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2004/03/17 15:37:43, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 .\.W.I.N .D.O.W.S [010] 00 5C 00 69 00 6E 00 69 00 66 00 69 00 6C 00 65 .\.i.n.i .f.i.l.e [020] 00 2E 00 75 00 70 00 64 00 00 00 ...u.p.d ... [2004/03/17 15:37:43, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:43, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:43, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2004/03/17 15:37:43, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:43, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x0 to open_mode 0x40 [2004/03/17 15:37:43, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\inifile.upd" [2004/03/17 15:37:43, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/inifile.upd] [2004/03/17 15:37:43, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [WINDOWS/INIFILE.UPD] [2004/03/17 15:37:43, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS] -> [WINDOWS] [2004/03/17 15:37:43, 5] smbd/statcache.c:stat_cache_add(178) stat_cache_add: Added entry WINDOWS/INIFILE.UPD -> WINDOWS/inifile.upd [2004/03/17 15:37:43, 5] smbd/filename.c:unix_convert(183) conversion finished WINDOWS/inifile.upd -> WINDOWS/inifile.upd [2004/03/17 15:37:43, 3] smbd/dosmode.c:unix_mode(110) unix_mode(WINDOWS/inifile.upd) returning 0744 [2004/03/17 15:37:43, 5] smbd/files.c:file_new(122) allocated file structure 3445, fnum = 7541 (19 used) [2004/03/17 15:37:43, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = WINDOWS/inifile.upd, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/inifile.upd [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINDOWS/inifile.upd] [2004/03/17 15:37:43, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:43, 10] smbd/open.c:fd_open(45) fd_open: name WINDOWS/inifile.upd, flags = 00 mode = 0744, fd = 41. [2004/03/17 15:37:43, 2] smbd/open.c:open_file(240) BryanW opened file WINDOWS/inifile.upd read=Yes write=No (numopen=4) [2004/03/17 15:37:43, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 40 [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/inifile.upd [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file WINDOWS/inifile.upd, dev = 811, inode = 14942267, file_id = 44558 [2004/03/17 15:37:43, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file WINDOWS/inifile.upd, dev = 811, inode = 14942267, file_id = 44558, tv_sec = 4058c527, tv_usec = 84db8 [2004/03/17 15:37:43, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file WINDOWS/inifile.upd. num_share_modes = 1 [2004/03/17 15:37:43, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x40, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44558, dev = 0x811, inode = 14942267 [2004/03/17 15:37:43, 8] smbd/dosmode.c:dos_mode(122) dos_mode: WINDOWS/inifile.upd [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/inifile.upd [2004/03/17 15:37:43, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:43, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:43, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7541, open name = WINDOWS/inifile.upd [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12103 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=29954 (0x7502) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=49886 (0xC2DE) smb_vwv[ 7]=50393 (0xC4D9) smb_vwv[ 8]=50182 (0xC406) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=55602 (0xD932) smb_vwv[11]=26079 (0x65DF) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=49886 (0xC2DE) smb_vwv[15]=50393 (0xC4D9) smb_vwv[16]=50182 (0xC406) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=49886 (0xC2DE) smb_vwv[19]=50393 (0xC4D9) smb_vwv[20]=50182 (0xC406) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=27136 (0x6A00) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:43, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:43, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:43, 3] smbd/process.c:process_smb(890) Transaction 1199118 of length 63 [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12167 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7541 (0x1D75) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 106 (0x6A) smb_vwv[ 6]= 106 (0x6A) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 106 (0x6A) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:43, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:43, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:43, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=106 unlocked for file WINDOWS/inifile.upd [2004/03/17 15:37:43, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File WINDOWS/inifile.upd, offset = 0, count = 106, type = READ [2004/03/17 15:37:43, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 106 [2004/03/17 15:37:43, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 41 12 0 106 0 [2004/03/17 15:37:43, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 41 12 0 106 0 [2004/03/17 15:37:43, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:43, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=106 unlocked for file WINDOWS/inifile.upd [2004/03/17 15:37:43, 10] smbd/fileio.c:read_file(101) read_file (WINDOWS/inifile.upd): pos = 0, size = 106, returned 106 [2004/03/17 15:37:43, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7541 max=106 nread=106 [2004/03/17 15:37:43, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:43, 5] lib/util.c:show_msg(466) size=165 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12167 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 106 (0x6A) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=106 [2004/03/17 15:37:43, 10] lib/util.c:dump_data(1830) [000] 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 \.?.?.\. C.:.\.W. [010] 49 00 4E 00 4E 00 54 00 5C 00 53 00 59 00 53 00 I.N.N.T. \.S.Y.S. [020] 54 00 45 00 4D 00 2E 00 49 00 4E 00 49 00 00 00 T.E.M... I.N.I... [030] 56 89 B0 D0 F1 75 C2 01 5C 00 3F 00 3F 00 5C 00 V....u.. \.?.?.\. [040] 43 00 3A 00 5C 00 57 00 49 00 4E 00 4E 00 54 00 C.:.\.W. I.N.N.T. [050] 5C 00 77 00 69 00 6E 00 2E 00 69 00 6E 00 69 00 \.w.i.n. ..i.n.i. [060] 00 00 24 03 B5 E1 DC FE C3 01 ..$..... .. [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(407) write_socket(15,169) [2004/03/17 15:37:43, 6] lib/util_sock.c:write_socket(410) write_socket(15,169) wrote 169 [2004/03/17 15:37:44, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:44, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:44, 3] smbd/process.c:process_smb(890) Transaction 1199119 of length 45 [2004/03/17 15:37:44, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:44, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12231 smt_wct=3 smb_vwv[ 0]= 7540 (0x1D74) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:44, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:44, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:44, 3] smbd/reply.c:reply_close(2567) close fd=39 fnum=7540 (numopen=4) [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44557, dev = 0x811, inode = 14942265 [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:44, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file WINDOWS/win.ini [2004/03/17 15:37:44, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file WINDOWS/win.ini, dev = 811, inode = 14942265 file_id = 44557 has kernel oplock state of 1. [2004/03/17 15:37:44, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file WINDOWS/win.ini has no outstanding locks. [2004/03/17 15:37:44, 2] smbd/close.c:close_normal_file(228) bryanw closed file WINDOWS/win.ini (numopen=3) [2004/03/17 15:37:44, 5] smbd/files.c:file_free(385) freed files structure 7540 (18 used) [2004/03/17 15:37:44, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:44, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12231 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:44, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:44, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:44, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:44, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:44, 3] smbd/process.c:process_smb(890) Transaction 1199120 of length 45 [2004/03/17 15:37:44, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:44, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12295 smt_wct=3 smb_vwv[ 0]= 7541 (0x1D75) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:44, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:44, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:44, 3] smbd/reply.c:reply_close(2567) close fd=41 fnum=7541 (numopen=3) [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x40, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44558, dev = 0x811, inode = 14942267 [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:44, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:44, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file WINDOWS/inifile.upd [2004/03/17 15:37:44, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file WINDOWS/inifile.upd, dev = 811, inode = 14942267 file_id = 44558 has kernel oplock state of 1. [2004/03/17 15:37:44, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file WINDOWS/inifile.upd has no outstanding locks. [2004/03/17 15:37:44, 2] smbd/close.c:close_normal_file(228) bryanw closed file WINDOWS/inifile.upd (numopen=2) [2004/03/17 15:37:44, 5] smbd/files.c:file_free(385) freed files structure 7541 (17 used) [2004/03/17 15:37:44, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:44, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12295 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:44, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:44, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199121 of length 116 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12359 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:39 2004 access: Wed Mar 17 15:37:41 2004 write: Wed Mar 17 15:37:39 2004 change: Wed Mar 17 15:37:39 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199122 of length 116 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12423 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 02 00 00 0A 04 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1034 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1034 call=5 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 56, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 56, paramsize = 2, datasize = 56 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,120) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,120) wrote 120 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 94 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x5e [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199123 of length 98 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=94 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12487 smt_wct=15 smb_vwv[ 0]= 26 (0x1A) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 26 (0x1A) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=29 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EC 03 00 00 00 00 5C 00 38 00 41 00 37 ........ .\.8.A.7 [010] 00 46 00 44 00 41 00 35 00 30 00 00 00 .F.D.A.5 .0... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\8A7FDA50" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/8A7FDA50] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [8A7FDA50] [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(188) unix_convert begin: name = 8A7FDA50, dirpath = , start = 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled 8A7FDA50 ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component 8A7FDA50 (len 8) ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled 8A7FDA50 ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component 8A7FDA50 (len 8) ? [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WIND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .bash_history [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .ssh [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: PUTTY.RND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0703.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0103.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: Outlook Tools [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: TreeSize.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: schema [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: putty.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: citrix_backup [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled 8A7FDA50 ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component 8A7FDA50 (len 8) ? [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(323) New file 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [8A7FDA50] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1934) call_trans2qfilepathinfo: SMB_VFS_STAT of 8A7FDA50 failed (No such file or directory) [2004/03/17 15:37:45, 10] smbd/trans2.c:set_bad_path_error(1802) set_bad_path_error: err = 2 bad_path = 0 [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/trans2.c(1808) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12487 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 104 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x68 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199124 of length 108 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=104 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12551 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4608 (0x1200) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1280 (0x500) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=21 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 38 00 41 00 37 00 46 00 44 00 41 00 35 .\.8.A.7 .F.D.A.5 [010] 00 30 00 00 00 .0... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x80, share_access = 0x0, create_disposition = 0x5 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x5 to 0x12 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x2019f, share access 0x0, file attributes 0x80 to open_mode 0x12 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\8A7FDA50" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/8A7FDA50] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [8A7FDA50] [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(188) unix_convert begin: name = 8A7FDA50, dirpath = , start = 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled 8A7FDA50 ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component 8A7FDA50 (len 8) ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled 8A7FDA50 ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component 8A7FDA50 (len 8) ? [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WIND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .bash_history [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .ssh [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: PUTTY.RND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0703.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0103.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: Outlook Tools [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: TreeSize.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: schema [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: putty.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: citrix_backup [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled 8A7FDA50 ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component 8A7FDA50 (len 8) ? [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(323) New file 8A7FDA50 [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(8A7FDA50) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3446, fnum = 7542 (18 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = 8A7FDA50, share_mode = 12, ofun = 12, mode = 744, oplock request = 3 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [8A7FDA50] [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x2 flags2=0x240 mode=0744 [2004/03/17 15:37:45, 10] smbd/open.c:fd_open(45) fd_open: name 8A7FDA50, flags = 0102 mode = 0744, fd = 39. [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file 8A7FDA50 read=Yes write=Yes (numopen=3) [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=18446744073709551616 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File 8A7FDA50, offset = 0, count = 18446744073709551616, type = WRITE [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 9223372036854775808 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 39 12 0 9223372036854775808 1 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 39 12 0 9223372036854775808 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=18446744073709551616 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 12 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file 8A7FDA50, dev = 811, inode = 5275707, file_id = 44559 [2004/03/17 15:37:45, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file 8A7FDA50, dev = 811, inode = 5275707, file_id = 44559, tv_sec = 4058c529, tv_usec = 52c54 [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file 8A7FDA50. num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x12, desired_access = 0x2019f, port = 0x81ac, type= 0x3, file_id = 44559, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7542, open name = 8A7FDA50 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12551 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=30210 (0x7602) smb_vwv[ 3]= 541 (0x21D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199125 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12615 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 66 00 76 1D FC 03 00 00 6E 00 00 02 00 00 00 .f.v.... .n...... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1020 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2750) call_trans2setfilepathinfo: Set end of file info for file 8A7FDA50 to 512 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 512 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(3115) call_trans2setfilepathinfo: file 8A7FDA50 : setting new size to 512 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_set_filelen(575) vfs_set_filelen: ftruncate 8A7FDA50 to len 512 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199126 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=12675 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 07 00 07 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199127 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12743 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 33 00 76 1D FB 03 00 00 34 00 00 02 00 00 00 .3.v.... .4...... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1019 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2679) call_trans2setfilepathinfo: Set file allocation info for file 8A7FDA50 to 512 [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2688) call_trans2setfilepathinfo: file 8A7FDA50 : setting new allocation size to 1048576 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_allocate_file_space(517) vfs_allocate_file_space: file 8A7FDA50, len 1048576 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 512 dosmode: 220 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 65 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x41 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199128 of length 69 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=65 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12807 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7542 (0x1D76) smb_vwv[ 3]= 8595 (0x2193) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 1 (0x1) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=2 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] EE 00 .. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBwriteX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=8595 len=1 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File 8A7FDA50, offset = 8595, count = 1, type = WRITE [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 8595, count_out = 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 39 12 8595 1 1 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 39 12 8595 1 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=8595 len=1 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/fileio.c:real_write_file(128) real_write_file (8A7FDA50): pos = 8595, size = 1, returned 1 [2004/03/17 15:37:45, 3] smbd/reply.c:reply_write_and_X(2388) writeX fnum=7542 num=1 wrote=1 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12807 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,51) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,51) wrote 51 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 80 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x50 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199129 of length 84 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=80 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=12871 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 100 (0x64) smb_vwv[ 3]= 800 (0x320) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 80 (0x50) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=15 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 EE EE EE EE EE EE 76 1D 02 01 EE EE EE EE .......v ....... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo 8A7FDA50 (fnum = 7542) level=258 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,88) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,88) wrote 88 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199130 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=12931 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 07 00 07 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199131 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=12999 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 72 00 76 1D FC 03 00 00 65 00 00 22 00 00 00 .r.v.... .e.."... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1020 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2750) call_trans2setfilepathinfo: Set end of file info for file 8A7FDA50 to 8704 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 8704 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(3115) call_trans2setfilepathinfo: file 8A7FDA50 : setting new size to 8704 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_set_filelen(575) vfs_set_filelen: ftruncate 8A7FDA50 to len 8704 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199132 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=13063 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 72 00 76 1D FB 03 00 00 65 00 00 22 00 00 00 .r.v.... .e.."... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1019 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2679) call_trans2setfilepathinfo: Set file allocation info for file 8A7FDA50 to 8704 [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2688) call_trans2setfilepathinfo: file 8A7FDA50 : setting new allocation size to 1048576 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_allocate_file_space(517) vfs_allocate_file_space: file 8A7FDA50, len 1048576 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 8704 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199133 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=13123 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 5B 97 86 [.. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199134 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=13191 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 72 00 76 1D FC 03 00 00 65 00 00 32 00 00 00 .r.v.... .e..2... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1020 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2750) call_trans2setfilepathinfo: Set end of file info for file 8A7FDA50 to 12800 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 12800 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(3115) call_trans2setfilepathinfo: file 8A7FDA50 : setting new size to 12800 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_set_filelen(575) vfs_set_filelen: ftruncate 8A7FDA50 to len 12800 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199135 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=13255 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 72 00 76 1D FB 03 00 00 65 00 00 32 00 00 00 .r.v.... .e..2... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1019 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2679) call_trans2setfilepathinfo: Set file allocation info for file 8A7FDA50 to 12800 [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2688) call_trans2setfilepathinfo: file 8A7FDA50 : setting new allocation size to 1048576 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_allocate_file_space(517) vfs_allocate_file_space: file 8A7FDA50, len 1048576 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 12800 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199136 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=13315 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 5B 97 86 [.. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199137 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=13383 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 76 1D FB 03 00 00 00 58 00 32 00 00 00 ...v.... ..X.2... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1019 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2679) call_trans2setfilepathinfo: Set file allocation info for file 8A7FDA50 to 12800 [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2688) call_trans2setfilepathinfo: file 8A7FDA50 : setting new allocation size to 1048576 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_allocate_file_space(517) vfs_allocate_file_space: file 8A7FDA50, len 1048576 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 12800 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199138 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=13447 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 76 1D FC 03 00 00 00 58 00 42 00 00 00 ...v.... ..X.B... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1020 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2750) call_trans2setfilepathinfo: Set end of file info for file 8A7FDA50 to 16896 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 16896 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(3115) call_trans2setfilepathinfo: file 8A7FDA50 : setting new size to 16896 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_set_filelen(575) vfs_set_filelen: ftruncate 8A7FDA50 to len 16896 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199139 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=13511 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=19 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 76 1D FB 03 00 00 00 58 00 42 00 00 00 ...v.... ..X.B... [010] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1019 totdata=8 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2679) call_trans2setfilepathinfo: Set file allocation info for file 8A7FDA50 to 16896 [2004/03/17 15:37:45, 10] smbd/trans2.c:call_trans2setfilepathinfo(2688) call_trans2setfilepathinfo: file 8A7FDA50 : setting new allocation size to 1048576 [2004/03/17 15:37:45, 10] smbd/vfs.c:vfs_allocate_file_space(517) vfs_allocate_file_space: file 8A7FDA50, len 1048576 [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 16896 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199140 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=13571 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 31 00 .1. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 65 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x41 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199141 of length 69 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=65 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=13639 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7542 (0x1D76) smb_vwv[ 3]=17919 (0x45FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 1 (0x1) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=2 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] EE 00 .. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBwriteX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=17919 len=1 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File 8A7FDA50, offset = 17919, count = 1, type = WRITE [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 17919, count_out = 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 39 12 17919 1 1 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 39 12 17919 1 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=17919 len=1 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/fileio.c:real_write_file(128) real_write_file (8A7FDA50): pos = 17919, size = 1, returned 1 [2004/03/17 15:37:45, 3] smbd/reply.c:reply_write_and_X(2388) writeX fnum=7542 num=1 wrote=1 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=13639 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,51) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,51) wrote 51 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 80 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x50 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199142 of length 84 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=80 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=13703 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 100 (0x64) smb_vwv[ 3]= 800 (0x320) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 80 (0x50) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=15 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 EE EE EE EE EE EE 76 1D 02 01 EE EE EE EE .......v ....... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo 8A7FDA50 (fnum = 7542) level=258 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,88) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,88) wrote 88 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199143 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=13767 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 31 00 .1. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 17984 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x4640 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199144 of length 17988 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=17984 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=13827 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7542 (0x1D76) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=17920 (0x4600) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=17921 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] EE D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 00 3E 00 03 00 FE FF 09 ........ .>...... [020] 00 06 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [030] 00 21 00 00 00 00 00 00 00 00 10 00 00 FE FF FF .!...... ........ [040] FF 00 00 00 00 FE FF FF FF 00 00 00 00 20 00 00 ........ ..... .. [050] 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [060] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [070] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [080] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [090] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [100] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [110] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [120] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [130] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [140] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [150] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [160] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [170] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [180] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [190] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBwriteX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=17920 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File 8A7FDA50, offset = 0, count = 17920, type = WRITE [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 17920 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 39 12 0 17920 1 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 39 12 0 17920 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=17920 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/fileio.c:real_write_file(128) real_write_file (8A7FDA50): pos = 0, size = 17920, returned 17920 [2004/03/17 15:37:45, 3] smbd/reply.c:reply_write_and_X(2388) writeX fnum=7542 num=17920 wrote=17920 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=13827 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=17920 (0x4600) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,51) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,51) wrote 51 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 8256 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x2040 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199145 of length 8260 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=8256 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=13891 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7542 (0x1D76) smb_vwv[ 3]= 8192 (0x2000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 8192 (0x2000) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=8193 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] EE 02 00 C1 04 14 00 00 00 15 00 00 00 83 00 02 ........ ........ [010] 00 00 00 84 00 02 00 00 00 A1 00 22 00 00 00 FF ........ ...".... [020] 00 01 00 01 00 01 00 04 00 00 04 04 04 00 00 00 ........ ........ [030] 00 00 00 E0 3F 00 00 00 00 00 00 E0 3F 00 00 55 ....?... ....?..U [040] 00 02 00 08 00 00 02 0E 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 3E 02 12 00 B6 00 00 00 00 .......> ........ [060] 00 40 00 00 00 00 00 00 00 00 00 00 00 1D 00 0F .@...... ........ [070] 00 03 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ........ [080] EF 00 06 00 00 00 37 00 00 00 0A 00 00 00 09 08 ......7. ........ [090] 10 00 00 06 10 00 DE 1E CD 07 C9 80 00 00 06 02 ........ ........ [0A0] 00 00 0B 02 10 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 45 1F 00 00 0D 00 02 00 01 00 0C 00 02 00 ..E..... ........ [0C0] 64 00 0F 00 02 00 01 00 11 00 02 00 00 00 10 00 d....... ........ [0D0] 08 00 FC A9 F1 D2 4D 62 50 3F 5F 00 02 00 01 00 ......Mb P?_..... [0E0] 2A 00 02 00 00 00 2B 00 02 00 00 00 82 00 02 00 *.....+. ........ [0F0] 01 00 80 00 08 00 00 00 00 00 00 00 00 00 25 02 ........ ......%. [100] 04 00 00 00 FF 00 81 00 02 00 C1 04 14 00 00 00 ........ ........ [110] 15 00 00 00 83 00 02 00 00 00 84 00 02 00 00 00 ........ ........ [120] A1 00 22 00 00 00 FF 00 01 00 01 00 01 00 04 00 .."..... ........ [130] 00 00 00 00 00 00 00 00 00 00 E0 3F 00 00 00 00 ........ ...?.... [140] 00 00 E0 3F 00 00 55 00 02 00 08 00 00 02 0E 00 ...?..U. ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3E 02 ........ ......>. [160] 12 00 B6 00 00 00 00 00 40 00 00 00 00 00 00 00 ........ @....... [170] 00 00 00 00 1D 00 0F 00 03 00 00 00 00 00 00 01 ........ ........ [180] 00 00 00 00 00 00 00 EF 00 06 00 00 00 37 00 00 ........ .....7.. [190] 00 0A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBwriteX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=8192 len=8192 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File 8A7FDA50, offset = 8192, count = 8192, type = WRITE [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 8192, count_out = 8192 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 39 12 8192 8192 1 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 39 12 8192 8192 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=8192 len=8192 unlocked for file 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/fileio.c:real_write_file(128) real_write_file (8A7FDA50): pos = 8192, size = 8192, returned 8192 [2004/03/17 15:37:45, 3] smbd/reply.c:reply_write_and_X(2388) writeX fnum=7542 num=8192 wrote=8192 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=13891 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8192 (0x2000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,51) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,51) wrote 51 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199146 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=13959 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 5B 97 86 [.. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 37 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x25 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199147 of length 41 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=37 smb_com=0x5 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14019 smt_wct=1 smb_vwv[ 0]= 7542 (0x1D76) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBflush (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_flush(2491) flush [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x5 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14019 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199148 of length 76 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14083 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7A 6F 00 72 1D ED 03 zo.r... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7538) level=1005 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,88) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,88) wrote 88 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199149 of length 76 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14147 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7A 6F 00 72 1D EC 03 zo.r... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7538) level=1004 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:39 2004 access: Wed Mar 17 15:37:41 2004 write: Wed Mar 17 15:37:39 2004 change: Wed Mar 17 15:37:39 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199150 of length 120 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14211 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7A 6F 00 76 1D EC 03 00 00 00 00 80 93 EB 11 68 zo.v.... .......h [010] 0C C4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7542) info_level=1004 totdata=40 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 17920 dosmode: 0 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 71 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x47 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199151 of length 75 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=71 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14275 smt_wct=8 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7538 (0x1D72) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]=65535 (0xFFFF) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]= 1 (0x1) smb_vwv[ 7]= 0 (0x0) smb_bcc=20 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] FF FE 00 00 00 00 00 00 93 FF FF 7F 00 00 00 00 ........ ........ [010] 01 00 00 00 .... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBlockingX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/reply.c:reply_lockingX(4280) reply_lockingX: unlock start=2147483539, len=1 for pid 65279, file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/locking.c:do_unlock(223) do_unlock: unlock start=2147483539 len=1 requested for file fundscore1003.xls [2004/03/17 15:37:45, 5] locking/posix.c:release_posix_lock(1109) release_posix_lock: File fundscore1003.xls, offset = 2147483539, count = 1 [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 2147483539, count_out = 1 [2004/03/17 15:37:45, 10] locking/posix.c:delete_posix_lock_entry(495) delete_posix_lock_entry: type = WRITE: start=2147483539 size=1, num_records = 0 [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_list(757) posix_lock_list: curr: start=2147483539,size=1 [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_list(773) posix_lock_list: lock: fd=34: start=2147483559,size=1:type=WRITEno overlap case. [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_list(773) posix_lock_list: lock: fd=34: start=2147483599,size=1:type=WRITEno overlap case. [2004/03/17 15:37:45, 5] locking/posix.c:release_posix_lock(1188) release_posix_lock: Real unlock: offset = 2147483539, count = 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 13 2147483539 1 2 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 13 2147483539 1 2 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1657) fcntl_lock: Lock call successful [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call successful [2004/03/17 15:37:45, 3] smbd/reply.c:reply_lockingX(4364) lockingX fnum=7538 type=16 num_locks=0 num_ulocks=1 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=39 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14275 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,43) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,43) wrote 43 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 71 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x47 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199152 of length 75 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=71 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14339 smt_wct=8 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7538 (0x1D72) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]=65535 (0xFFFF) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]= 1 (0x1) smb_vwv[ 7]= 0 (0x0) smb_bcc=20 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] FF FE 00 00 00 00 00 00 A7 FF FF 7F 00 00 00 00 ........ ........ [010] 01 00 00 00 .... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBlockingX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/reply.c:reply_lockingX(4280) reply_lockingX: unlock start=2147483559, len=1 for pid 65279, file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/locking.c:do_unlock(223) do_unlock: unlock start=2147483559 len=1 requested for file fundscore1003.xls [2004/03/17 15:37:45, 5] locking/posix.c:release_posix_lock(1109) release_posix_lock: File fundscore1003.xls, offset = 2147483559, count = 1 [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 2147483559, count_out = 1 [2004/03/17 15:37:45, 10] locking/posix.c:delete_posix_lock_entry(495) delete_posix_lock_entry: type = WRITE: start=2147483559 size=1, num_records = 0 [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_list(757) posix_lock_list: curr: start=2147483559,size=1 [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_list(773) posix_lock_list: lock: fd=34: start=2147483599,size=1:type=WRITEno overlap case. [2004/03/17 15:37:45, 5] locking/posix.c:release_posix_lock(1188) release_posix_lock: Real unlock: offset = 2147483559, count = 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 13 2147483559 1 2 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 13 2147483559 1 2 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1657) fcntl_lock: Lock call successful [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call successful [2004/03/17 15:37:45, 3] smbd/reply.c:reply_lockingX(4364) lockingX fnum=7538 type=16 num_locks=0 num_ulocks=1 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=39 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14339 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,43) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,43) wrote 43 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 71 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x47 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199153 of length 75 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=71 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14403 smt_wct=8 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7538 (0x1D72) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]=65535 (0xFFFF) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]= 1 (0x1) smb_vwv[ 7]= 0 (0x0) smb_bcc=20 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] FF FE 00 00 00 00 00 00 CF FF FF 7F 00 00 00 00 ........ ........ [010] 01 00 00 00 .... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBlockingX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/reply.c:reply_lockingX(4280) reply_lockingX: unlock start=2147483599, len=1 for pid 65279, file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/locking.c:do_unlock(223) do_unlock: unlock start=2147483599 len=1 requested for file fundscore1003.xls [2004/03/17 15:37:45, 5] locking/posix.c:release_posix_lock(1109) release_posix_lock: File fundscore1003.xls, offset = 2147483599, count = 1 [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 2147483599, count_out = 1 [2004/03/17 15:37:45, 10] locking/posix.c:delete_posix_lock_entry(495) delete_posix_lock_entry: type = WRITE: start=2147483599 size=1, num_records = 0 [2004/03/17 15:37:45, 5] locking/posix.c:release_posix_lock(1188) release_posix_lock: Real unlock: offset = 2147483599, count = 1 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 13 2147483599 1 2 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 13 2147483599 1 2 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1657) fcntl_lock: Lock call successful [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call successful [2004/03/17 15:37:45, 3] smbd/reply.c:reply_lockingX(4364) lockingX fnum=7538 type=16 num_locks=0 num_ulocks=1 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=39 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14403 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,43) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,43) wrote 43 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199154 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14467 smt_wct=3 smb_vwv[ 0]= 7538 (0x1D72) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=34 fnum=7538 (numopen=3) [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x42, desired_access = 0x2019f, port = 0x0, type= 0x0, file_id = 44555, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:45, 10] locking/posix.c:fd_close_posix(259) fd_close_posix: doing close on 1 fd's. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=2) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7538 (17 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14467 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199155 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14531 smt_wct=3 smb_vwv[ 0]= 7542 (0x1D76) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=39 fnum=7542 (numopen=2) [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x12, desired_access = 0x2019f, port = 0x81ac, type= 0x3, file_id = 44559, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file 8A7FDA50, dev = 811, inode = 5275707 file_id = 44559 has kernel oplock state of 1. [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file 8A7FDA50 has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file 8A7FDA50 (numopen=1) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7542 (16 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14531 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199156 of length 116 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14595 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:39 2004 access: Wed Mar 17 15:37:41 2004 write: Wed Mar 17 15:37:39 2004 change: Wed Mar 17 15:37:39 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199157 of length 116 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14659 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:39 2004 access: Wed Mar 17 15:37:41 2004 write: Wed Mar 17 15:37:39 2004 change: Wed Mar 17 15:37:39 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 122 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7a [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199158 of length 126 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=122 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14723 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9216 (0x2400) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=39 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20000, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(fundscore1003.xls) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3447, fnum = 7543 (17 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = fundscore1003.xls, share_mode = 8040, ofun = 1, mode = 744, oplock request = 0 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file fundscore1003.xls read=Yes write=No (numopen=2) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file fundscore1003.xls. num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20000, port = 0x0, type= 0x0, file_id = 44560, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7543, open name = fundscore1003.xls [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14723 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=30464 (0x7700) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60307 (0xEB93) smb_vwv[ 7]=26641 (0x6811) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]= 7360 (0x1CC0) smb_vwv[11]=26643 (0x6813) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60307 (0xEB93) smb_vwv[15]=26641 (0x6811) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60307 (0xEB93) smb_vwv[19]=26641 (0x6811) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199159 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14787 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 2 (0x2) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 77 1D 00 00 07 00 00 00 ...w.... ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 77 1D 00 00 07 00 00 00 w....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 176. [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8004 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000078 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000094 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_dom_sid owner_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0078 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0079 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0080 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_dom_sid grp_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0094 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0095 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0096 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0097 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0098 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0099 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 009c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 176, useable_space = 130994 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 176, paramsize = 4, datasize = 176 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,258) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,258) wrote 258 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199160 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14851 smt_wct=3 smb_vwv[ 0]= 7543 (0x1D77) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=-1 fnum=7543 (numopen=2) [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20000, port = 0x0, type= 0x0, file_id = 44560, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=1) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7543 (16 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=14851 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 104 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x68 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199161 of length 108 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=104 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14915 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4608 (0x1200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 3072 (0xC00) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=21 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 38 00 41 00 37 00 46 00 44 00 41 00 35 .\.8.A.7 .F.D.A.5 [010] 00 30 00 00 00 .0... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0xc0000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0xc0000, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\8A7FDA50" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/8A7FDA50] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [8A7FDA50] [2004/03/17 15:37:45, 5] smbd/statcache.c:stat_cache_add(178) stat_cache_add: Added entry 8A7FDA50 -> 8A7FDA50 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(183) conversion finished 8A7FDA50 -> 8A7FDA50 [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(8A7FDA50) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3448, fnum = 7544 (17 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = 8A7FDA50, share_mode = 8040, ofun = 1, mode = 744, oplock request = 0 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [8A7FDA50] [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file 8A7FDA50 read=Yes write=No (numopen=2) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file 8A7FDA50. num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0xc0000, port = 0x0, type= 0x0, file_id = 44561, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7544, open name = 8A7FDA50 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14915 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=30720 (0x7800) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 260 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x104 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199162 of length 264 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=260 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=14979 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]=45056 (0xB000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]=45056 (0xB000) smb_vwv[14]= 0 (0x0) smb_vwv[15]=21504 (0x5400) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 3 (0x3) smb_bcc=187 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 78 1D 00 00 07 00 00 00 01 00 04 80 78 ...x.... .......x [010] 00 00 00 94 00 00 00 00 00 00 00 14 00 00 00 03 ........ ........ [020] 00 64 00 03 00 00 00 00 00 24 00 FF 01 1F 00 01 .d...... .$...... [030] 05 00 00 00 00 00 05 15 00 00 00 15 11 0A 3E 66 ........ ......>f [040] EF E5 A7 9D B0 A5 98 28 52 00 00 00 00 24 00 89 .......( R....$.. [050] 00 12 00 01 05 00 00 00 00 00 05 15 00 00 00 15 ........ ........ [060] 11 0A 3E 66 EF E5 A7 9D B0 A5 98 2B 52 00 00 00 ..>f.... ...+R... [070] 00 14 00 89 00 12 00 01 01 00 00 00 00 00 01 00 ........ ........ [080] 00 00 00 01 05 00 00 00 00 00 05 15 00 00 00 15 ........ ........ [090] 11 0A 3E 66 EF E5 A7 9D B0 A5 98 28 52 00 00 01 ..>f.... ...(R... [0A0] 05 00 00 00 00 00 05 15 00 00 00 15 11 0A 3E 66 ........ ......>f [0B0] EF E5 A7 9D B0 A5 98 2B 52 00 00 .......+ R.. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 78 1D 00 00 07 00 00 00 x....... [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2474) reply_nttrans: data_count = 176 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 01 00 04 80 78 00 00 00 94 00 00 00 00 00 00 00 ....x... ........ [010] 14 00 00 00 03 00 64 00 03 00 00 00 00 00 24 00 ......d. ......$. [020] FF 01 1F 00 01 05 00 00 00 00 00 05 15 00 00 00 ........ ........ [030] 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 28 52 00 00 ...>f... ....(R.. [040] 00 00 24 00 89 00 12 00 01 05 00 00 00 00 00 05 ..$..... ........ [050] 15 00 00 00 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 .......> f....... [060] 2B 52 00 00 00 00 14 00 89 00 12 00 01 01 00 00 +R...... ........ [070] 00 00 00 01 00 00 00 00 01 05 00 00 00 00 00 05 ........ ........ [080] 15 00 00 00 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 .......> f....... [090] 28 52 00 00 01 05 00 00 00 00 00 05 15 00 00 00 (R...... ........ [0A0] 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 2B 52 00 00 ...>f... ....+R.. [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(1735) call_nt_transact_set_security_desc: file = 8A7FDA50, sent 0x7 [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8004 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000078 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000094 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_dom_sid owner_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0078 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0079 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0080 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_dom_sid grp_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0094 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0095 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0096 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0097 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0098 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0099 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 009c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:set_nt_acl(2977) set_nt_acl: called for file 8A7FDA50 [2004/03/17 15:37:45, 5] smbd/posix_acls.c:unpack_nt_owners(902) unpack_nt_owners: validating owner_sids. [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_uid_from_cache(182) fetch uid from cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_gid_from_cache(256) fetch uid from cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 5] smbd/posix_acls.c:unpack_nt_owners(943) unpack_nt_owners: owner_sids validated. [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] passdb/lookup_sid.c:sid_to_gid(459) sid_to_gid: winbind lookup for sid S-1-5-21-1040847125-2816864102-2560995485-21032 failed - trying local. [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(10016, 10017) : sec_ctx_stack_ndx = 1 [2004/03/17 15:37:45, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(728) : conn_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 10] passdb/passdb.c:local_sid_to_gid(1271) local_sid_to_gid: Fall back to algorithmic mapping [2004/03/17 15:37:45, 3] passdb/passdb.c:local_sid_to_gid(1274) local_sid_to_gid: SID S-1-5-21-1040847125-2816864102-2560995485-21032 is *NOT* a group [2004/03/17 15:37:45, 10] passdb/lookup_sid.c:sid_to_gid(464) sid_to_gid: no one knows this SID [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_uid_from_cache(182) fetch uid from cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:create_canon_ace_lists(1488) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER perms rwx [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_gid_from_cache(256) fetch uid from cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:create_canon_ace_lists(1488) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:create_canon_ace_lists(1488) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:check_owning_objs(1200) check_owning_objs: ACL is missing an owner entry. [2004/03/17 15:37:45, 10] smbd/posix_acls.c:check_owning_objs(1202) check_owning_objs: ACL is missing an owning group entry. [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - before merge canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - before merge [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - before deny canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - before deny [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - before valid canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - before valid [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(8A7FDA50) returning 0744 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - return canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - return [2004/03/17 15:37:45, 10] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2550) convert_canon_ace_to_posix_perms: converted u=700,g=400,w=400 to perm=0744 for file 8A7FDA50. [2004/03/17 15:37:45, 3] smbd/posix_acls.c:set_nt_acl(3147) set_nt_acl: chmod 8A7FDA50. perms = 0744. [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199163 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=15043 smt_wct=3 smb_vwv[ 0]= 7544 (0x1D78) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=-1 fnum=7544 (numopen=2) [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0xc0000, port = 0x0, type= 0x0, file_id = 44561, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file 8A7FDA50 has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file 8A7FDA50 (numopen=1) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7544 (16 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=15043 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 122 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7a [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199164 of length 126 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=122 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15107 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9216 (0x2400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 768 (0x300) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=39 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x30089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(435) map_share_mode: DELETE_ACCESS requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x30089, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(fundscore1003.xls) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3449, fnum = 7545 (17 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = fundscore1003.xls, share_mode = 8040, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 10] smbd/open.c:fd_open(45) fd_open: name fundscore1003.xls, flags = 00 mode = 0744, fd = 34. [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file fundscore1003.xls read=Yes write=No (numopen=2) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file fundscore1003.xls, dev = 811, inode = 5275849, file_id = 44562 [2004/03/17 15:37:45, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file fundscore1003.xls, dev = 811, inode = 5275849, file_id = 44562, tv_sec = 4058c529, tv_usec = 6eaec [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file fundscore1003.xls. num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x30089, port = 0x81ac, type= 0x3, file_id = 44562, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7545, open name = fundscore1003.xls [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15107 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=30978 (0x7902) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60307 (0xEB93) smb_vwv[ 7]=26641 (0x6811) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]= 7360 (0x1CC0) smb_vwv[11]=26643 (0x6813) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60307 (0xEB93) smb_vwv[15]=26641 (0x6811) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60307 (0xEB93) smb_vwv[19]=26641 (0x6811) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 104 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x68 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199165 of length 108 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=104 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15171 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4608 (0x1200) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 1793 (0x701) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=21 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 38 00 41 00 37 00 46 00 44 00 41 00 35 .\.8.A.7 .F.D.A.5 [010] 00 30 00 00 00 .0... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x7019f file_attributes = 0x0, share_access = 0x0, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(435) map_share_mode: DELETE_ACCESS requested. open_mode = 0x2 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x7019f, share access 0x0, file attributes 0x0 to open_mode 0x12 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\8A7FDA50" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/8A7FDA50] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [8A7FDA50] -> [8A7FDA50] [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(8A7FDA50) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3450, fnum = 7546 (18 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = 8A7FDA50, share_mode = 12, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [8A7FDA50] [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x2 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 10] smbd/open.c:fd_open(45) fd_open: name 8A7FDA50, flags = 02 mode = 0744, fd = 36. [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file 8A7FDA50 read=Yes write=Yes (numopen=3) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 12 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file 8A7FDA50, dev = 811, inode = 5275707, file_id = 44563 [2004/03/17 15:37:45, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file 8A7FDA50, dev = 811, inode = 5275707, file_id = 44563, tv_sec = 4058c529, tv_usec = 6f561 [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file 8A7FDA50. num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x12, desired_access = 0x7019f, port = 0x81ac, type= 0x3, file_id = 44563, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7546, open name = 8A7FDA50 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15171 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=31234 (0x7A02) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199166 of length 76 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15235 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 72 00 79 1D EC 03 .r.y... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7545) level=1004 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:39 2004 access: Wed Mar 17 15:37:41 2004 write: Wed Mar 17 15:37:39 2004 change: Wed Mar 17 15:37:39 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199167 of length 120 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15299 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 72 00 7A 1D EC 03 00 00 65 00 80 93 EB 11 68 .r.z.... .e.....h [010] 0C C4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 ........ ... .... [030] 00 00 00 ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) 8A7FDA50 (fnum 7546) info_level=1004 totdata=40 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:45 2004 modtime: Wed Dec 31 18:00:00 1969 size: 17920 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 70 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x46 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199168 of length 74 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15363 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 72 00 05 01 .r... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfsinfo(1393) call_trans2qfsinfo: level = 261 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,80) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,80) wrote 80 [2004/03/17 15:37:45, 4] smbd/trans2.c:call_trans2qfsinfo(1676) SMBtrans2 info_level = 261 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 122 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7a [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199169 of length 126 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=122 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15427 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9216 (0x2400) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=39 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x20080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20080, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(fundscore1003.xls) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3451, fnum = 7547 (19 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = fundscore1003.xls, share_mode = 8040, ofun = 1, mode = 744, oplock request = 0 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 10] locking/locking.c:get_share_modes(453) get_share_modes: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x30089, port = 0x81ac, type= 0x3, file_id = 44562, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 5] smbd/open.c:open_mode_check(618) open_mode_check: oplock_request = 0, breaking oplock (3) on file fundscore1003.xls, dev = 811, inode = 5275849 [2004/03/17 15:37:45, 5] smbd/oplock.c:request_oplock_break(937) request_oplock_break: breaking our own oplock [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275849 file_id = 44562 Current oplocks_open (exclusive = 2, levelII = 0) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,55) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,55) wrote 55 [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275849 file_id = 44562 Current oplocks_open (exclusive = 2, levelII = 0) [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 51 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x33 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199169 of length 55 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=51 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=65535 smt_wct=8 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7545 (0x1D79) smb_vwv[ 3]= 18 (0x12) smb_vwv[ 4]=65535 (0xFFFF) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBlockingX (pid 14792) [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:45, 5] smbd/reply.c:reply_lockingX(4220) reply_lockingX: oplock break reply (0) from client for fnum = 7545 [2004/03/17 15:37:45, 10] locking/locking.c:remove_share_oplock_fn(759) remove_share_oplock_fn: removing oplock info for entry dev=811 ino=5275849 [2004/03/17 15:37:45, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file fundscore1003.xls, dev = 811, inode = 5275849 file_id = 44562 has kernel oplock state of 1. [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275849 file_id = 44562 Current oplocks_open (exclusive = 1, levelII = 0) [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(563) initial_break_processing: file fundscore1003.xls (dev = 811, inode = 5275849, file_id = 44562) has no oplock. Allowing break to succeed regardless. [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw [2004/03/17 15:37:45, 3] smbd/oplock.c:oplock_break(903) oplock_break: returning success for dev = 811, inode = 5275849, file_id = 44562 Current exclusive_oplocks_open = 1 [2004/03/17 15:37:45, 10] locking/locking.c:get_share_modes(453) get_share_modes: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x30089, port = 0x0, type= 0x0, file_id = 44562, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 5] smbd/open.c:check_share_mode(500) check_share_mode: Allowing open on file fundscore1003.xls as desired access (0x20080) doesn't conflict withexisting desired access (0x30089). [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file fundscore1003.xls read=Yes write=No (numopen=4) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(681) set_share_mode: adding entry for file fundscore1003.xls. new num_share_modes = 2 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20080, port = 0x0, type= 0x0, file_id = 44564, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[1]: pid = 14792, share_mode = 0x8040, desired_access = 0x30089, port = 0x0, type= 0x0, file_id = 44562, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7547, open name = fundscore1003.xls [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15427 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=31488 (0x7B00) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60307 (0xEB93) smb_vwv[ 7]=26641 (0x6811) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]= 7360 (0x1CC0) smb_vwv[11]=26643 (0x6813) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60307 (0xEB93) smb_vwv[15]=26641 (0x6811) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60307 (0xEB93) smb_vwv[19]=26641 (0x6811) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199171 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15491 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7B 1D 00 00 04 00 00 00 ..X{.... ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw/ [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7B 1D 00 00 04 00 00 00 {....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 120. [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/nttrans.c(104) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 131030 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,82) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,82) wrote 82 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199172 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15555 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=30720 (0x7800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7B 1D 00 00 04 00 00 00 ..X{.... ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7B 1D 00 00 04 00 00 00 {....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 120. [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8004 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 120, useable_space = 130994 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 120, paramsize = 4, datasize = 120 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,202) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,202) wrote 202 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 88 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x58 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199173 of length 92 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=15619 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 00 00 .\... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20000, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/] [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(183) conversion finished . -> . [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(.) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3452, fnum = 7548 (20 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = ., share_mode = 8040, ofun = 1, mode = 744, oplock request = 0 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: . [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [.] [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7548 (19 used) [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3453, fnum = 7549 (20 used) [2004/03/17 15:37:45, 5] smbd/open.c:open_directory(1345) open_directory: opening directory . [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: . [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: . [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7549, open name = . [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=15619 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=32000 (0x7D00) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199174 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=15683 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7D 1D 00 00 04 00 00 00 ..X}.... ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7D 1D 00 00 04 00 00 00 }....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = . [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file . [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 100 -> S-1-5-21-1040847125-2816864102-2560995485-1201 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 120. [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = Function not implemented [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/nttrans.c(104) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 131030 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,82) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,82) wrote 82 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199175 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=15747 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=30720 (0x7800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7D 1D 00 00 04 00 00 00 ..X}.... ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7D 1D 00 00 04 00 00 00 }....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = . [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file . [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 100 -> S-1-5-21-1040847125-2816864102-2560995485-1201 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 120. [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8004 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 001200a0 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 000004b1 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 001200a0 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 120, useable_space = 130994 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 120, paramsize = 4, datasize = 120 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,202) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,202) wrote 202 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199176 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=65279 smb_uid=728 smb_mid=15811 smt_wct=3 smb_vwv[ 0]= 7549 (0x1D7D) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2553) close directory fnum=7549 [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7549 (19 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=38 smb_pid=65279 smb_uid=728 smb_mid=15811 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199177 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15875 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7B 1D 00 00 07 00 00 00 ..X{.... ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7B 1D 00 00 07 00 00 00 {....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 176. [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/nttrans.c(104) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 131030 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,82) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,82) wrote 82 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199178 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=15939 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=45056 (0xB000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7B 1D 00 00 07 00 00 00 ..X{.... ... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7B 1D 00 00 07 00 00 00 {....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 176. [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8004 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000078 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000094 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_dom_sid owner_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0078 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0079 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0080 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_dom_sid grp_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0094 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0095 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0096 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0097 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0098 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0099 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 009c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 176, useable_space = 130994 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 176, paramsize = 4, datasize = 176 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,258) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,258) wrote 258 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199179 of length 76 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16003 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 7B 1D EC 03 ...{... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7547) level=1004 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:39 2004 access: Wed Mar 17 15:37:41 2004 write: Wed Mar 17 15:37:39 2004 change: Wed Mar 17 15:37:39 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199180 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16067 smt_wct=3 smb_vwv[ 0]= 7547 (0x1D7B) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=-1 fnum=7547 (numopen=4) [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 2 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20080, port = 0x0, type= 0x0, file_id = 44564, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x30089, port = 0x0, type= 0x0, file_id = 44562, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 1 for file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=3) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7547 (18 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16067 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 104 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x68 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199181 of length 108 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=104 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16131 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4608 (0x1200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 1536 (0x600) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=21 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 38 00 41 00 37 00 46 00 44 00 41 00 35 .\.8.A.7 .F.D.A.5 [010] 00 30 00 00 00 .0... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x60080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x60080, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\8A7FDA50" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/8A7FDA50] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [8A7FDA50] -> [8A7FDA50] [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(8A7FDA50) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3454, fnum = 7550 (19 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = 8A7FDA50, share_mode = 8040, ofun = 1, mode = 744, oplock request = 0 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [8A7FDA50] [2004/03/17 15:37:45, 10] locking/locking.c:get_share_modes(453) get_share_modes: share_mode_entry[0]: pid = 14792, share_mode = 0x12, desired_access = 0x7019f, port = 0x81ac, type= 0x3, file_id = 44563, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 5] smbd/open.c:open_mode_check(618) open_mode_check: oplock_request = 0, breaking oplock (3) on file 8A7FDA50, dev = 811, inode = 5275707 [2004/03/17 15:37:45, 5] smbd/oplock.c:request_oplock_break(937) request_oplock_break: breaking our own oplock [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275707 file_id = 44563 Current oplocks_open (exclusive = 1, levelII = 0) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,55) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,55) wrote 55 [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275707 file_id = 44563 Current oplocks_open (exclusive = 1, levelII = 0) [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 51 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x33 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199181 of length 55 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=51 smb_com=0x24 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=65535 smt_wct=8 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7546 (0x1D7A) smb_vwv[ 3]= 18 (0x12) smb_vwv[ 4]=65535 (0xFFFF) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBlockingX (pid 14792) [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:45, 5] smbd/reply.c:reply_lockingX(4220) reply_lockingX: oplock break reply (0) from client for fnum = 7546 [2004/03/17 15:37:45, 10] locking/locking.c:remove_share_oplock_fn(759) remove_share_oplock_fn: removing oplock info for entry dev=811 ino=5275707 [2004/03/17 15:37:45, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file 8A7FDA50, dev = 811, inode = 5275707 file_id = 44563 has kernel oplock state of 1. [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275707 file_id = 44563 Current oplocks_open (exclusive = 0, levelII = 0) [2004/03/17 15:37:45, 3] smbd/oplock.c:initial_break_processing(563) initial_break_processing: file 8A7FDA50 (dev = 811, inode = 5275707, file_id = 44563) has no oplock. Allowing break to succeed regardless. [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw [2004/03/17 15:37:45, 3] smbd/oplock.c:oplock_break(903) oplock_break: returning success for dev = 811, inode = 5275707, file_id = 44563 Current exclusive_oplocks_open = 0 [2004/03/17 15:37:45, 10] locking/locking.c:get_share_modes(453) get_share_modes: share_mode_entry[0]: pid = 14792, share_mode = 0x12, desired_access = 0x7019f, port = 0x0, type= 0x0, file_id = 44563, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 5] smbd/open.c:check_share_mode(500) check_share_mode: Allowing open on file 8A7FDA50 as desired access (0x60080) doesn't conflict withexisting desired access (0x7019f). [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file 8A7FDA50 read=Yes write=No (numopen=4) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(681) set_share_mode: adding entry for file 8A7FDA50. new num_share_modes = 2 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x60080, port = 0x0, type= 0x0, file_id = 44567, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[1]: pid = 14792, share_mode = 0x12, desired_access = 0x7019f, port = 0x0, type= 0x0, file_id = 44563, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7550, open name = 8A7FDA50 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16131 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=32256 (0x7E00) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 88 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x58 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199183 of length 92 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=16195 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 00 00 .\... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:45, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw/ [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20000, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/] [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(183) conversion finished . -> . [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(.) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3455, fnum = 7551 (20 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = ., share_mode = 8040, ofun = 1, mode = 744, oplock request = 0 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: . [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [.] [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7551 (19 used) [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3456, fnum = 7552 (20 used) [2004/03/17 15:37:45, 5] smbd/open.c:open_directory(1345) open_directory: opening directory . [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: . [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: . [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7552, open name = . [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=16195 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=32768 (0x8000) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199184 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=16259 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 80 1D 00 00 04 00 00 20 ..X..... .. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 80 1D 00 00 04 00 00 20 ....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = . [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file . [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 100 -> S-1-5-21-1040847125-2816864102-2560995485-1201 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 120. [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = Function not implemented [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/nttrans.c(104) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 131030 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,82) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,82) wrote 82 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199185 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=2136 smb_uid=728 smb_mid=16323 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=30720 (0x7800) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 80 1D 00 00 04 00 00 20 ..X..... .. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 80 1D 00 00 04 00 00 20 ....... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = . [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file . [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 100 -> S-1-5-21-1040847125-2816864102-2560995485-1201 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-1201 gid 100 (users) SMB_ACL_GROUP_OBJ perms --x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --x [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 40 to (NT) 1200a0 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 120. [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8004 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 001200a0 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 000004b1 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 001200a0 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 120, useable_space = 130994 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 120, paramsize = 4, datasize = 120 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,202) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,202) wrote 202 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199186 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=38 smb_pid=65279 smb_uid=728 smb_mid=16387 smt_wct=3 smb_vwv[ 0]= 7552 (0x1D80) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2553) close directory fnum=7552 [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7552 (19 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=38 smb_pid=65279 smb_uid=728 smb_mid=16387 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199187 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16451 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7E 1D 00 00 07 00 00 20 ..X~.... .. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:45, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7E 1D 00 00 07 00 00 20 ~...... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file 8A7FDA50 [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 176. [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/nttrans.c(104) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 131030 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,82) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,82) wrote 82 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199188 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16515 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=45056 (0xB000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 6 (0x6) smb_bcc=11 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7E 1D 00 00 07 00 00 20 ..X~.... .. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7E 1D 00 00 07 00 00 20 ~...... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1624) call_nt_transact_query_security_desc: file = 8A7FDA50 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:get_nt_acl(2654) get_nt_acl: called for file 8A7FDA50 [2004/03/17 15:37:45, 5] smbd/posix_acls.c:get_nt_acl(2691) get_nt_acl : file ACL absent, directory ACL absent [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2184) canonicalise_acl: Access ace entries before arrange : [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:canonicalise_acl(2197) canon_ace index 2. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: canonicalise_acl: ace entries after arrange canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:map_canon_ace_perms(827) map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1649) call_nt_transact_query_security_desc: sd_size = 176. [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8004 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000078 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000094 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_dom_sid owner_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0078 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0079 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0080 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_dom_sid grp_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0094 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0095 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0096 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0097 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0098 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0099 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 009c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(237) nt_rep: params_sent_thistime = 4, data_sent_thistime = 176, useable_space = 130994 [2004/03/17 15:37:45, 9] smbd/nttrans.c:send_nt_replies(239) nt_rep: params_to_send = 4, data_to_send = 176, paramsize = 4, datasize = 176 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,258) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,258) wrote 258 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 260 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x104 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199189 of length 264 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=260 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16579 smt_wct=19 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2048 (0x800) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]=45056 (0xB000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2048 (0x800) smb_vwv[10]= 0 (0x0) smb_vwv[11]=19456 (0x4C00) smb_vwv[12]= 0 (0x0) smb_vwv[13]=45056 (0xB000) smb_vwv[14]= 0 (0x0) smb_vwv[15]=21504 (0x5400) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 3 (0x3) smb_bcc=187 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 58 7E 1D 00 00 04 00 00 20 01 00 04 8D 78 ..X~.... .. ....x [010] 00 00 00 94 00 00 00 00 00 00 00 14 00 00 00 03 ........ ........ [020] 00 64 00 03 00 00 00 00 00 24 00 FF 01 1F 00 01 .d...... .$...... [030] 05 00 00 00 00 00 05 15 00 00 00 15 11 0A 3E 66 ........ ......>f [040] EF E5 A7 9D B0 A5 98 28 52 00 00 00 00 24 00 89 .......( R....$.. [050] 00 12 00 01 05 00 00 00 00 00 05 15 00 00 00 15 ........ ........ [060] 11 0A 3E 66 EF E5 A7 9D B0 A5 98 2B 52 00 00 00 ..>f.... ...+R... [070] 00 14 00 89 00 12 00 01 01 00 00 00 00 00 01 00 ........ ........ [080] 00 00 00 01 05 00 00 00 00 00 05 15 00 00 00 15 ........ ........ [090] 11 0A 3E 66 EF E5 A7 9D B0 A5 98 28 52 00 00 01 ..>f.... ...(R... [0A0] 05 00 00 00 00 00 05 15 00 00 00 15 11 0A 3E 66 ........ ......>f [0B0] EF E5 A7 9D B0 A5 98 2B 52 00 00 .......+ R.. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2462) reply_nttrans: parameter_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 7E 1D 00 00 04 00 00 20 ~...... [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2474) reply_nttrans: data_count = 176 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 01 00 04 8D 78 00 00 00 94 00 00 00 00 00 00 00 ....x... ........ [010] 14 00 00 00 03 00 64 00 03 00 00 00 00 00 24 00 ......d. ......$. [020] FF 01 1F 00 01 05 00 00 00 00 00 05 15 00 00 00 ........ ........ [030] 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 28 52 00 00 ...>f... ....(R.. [040] 00 00 24 00 89 00 12 00 01 05 00 00 00 00 00 05 ..$..... ........ [050] 15 00 00 00 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 .......> f....... [060] 2B 52 00 00 00 00 14 00 89 00 12 00 01 01 00 00 +R...... ........ [070] 00 00 00 01 00 00 00 00 01 05 00 00 00 00 00 05 ........ ........ [080] 15 00 00 00 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 .......> f....... [090] 28 52 00 00 01 05 00 00 00 00 00 05 15 00 00 00 (R...... ........ [0A0] 15 11 0A 3E 66 EF E5 A7 9D B0 A5 98 2B 52 00 00 ...>f... ....+R.. [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(1735) call_nt_transact_set_security_desc: file = 8A7FDA50, sent 0x20000004 [2004/03/17 15:37:45, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc sd data [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 revision : 0001 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 type : 8d04 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 off_owner_sid: 00000078 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 off_grp_sid : 00000094 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c off_sacl : 00000000 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_dacl : 00000014 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_dom_sid owner_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0078 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0079 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0080 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_dom_sid grp_sid [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0094 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0095 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0096 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0097 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0098 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0099 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 009c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 revision: 0003 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 size : 0064 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_aces : 00000003 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001c type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 001d flags: 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e size : 0024 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 mask: 001f01ff [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0024 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0025 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0026 id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0027 id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002a id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 002b id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 002c sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 00005228 [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_ace ace_list[01]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0040 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0041 flags: 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0042 size : 0024 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000044 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000015 3e0a1115 a7e5ef66 98a5b09d 0000522b [2004/03/17 15:37:45, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_ace ace_list[02]: [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 type : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 flags: 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0066 size : 0014 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_access info [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0068 mask: 00120089 [2004/03/17 15:37:45, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid trustee [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c sid_rev_num: 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d num_auths : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[0] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[1] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 id_auth[2] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 id_auth[3] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[4] : 00 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[5] : 01 [2004/03/17 15:37:45, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0074 sub_auths : 00000000 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:set_nt_acl(2977) set_nt_acl: called for file 8A7FDA50 [2004/03/17 15:37:45, 5] smbd/posix_acls.c:unpack_nt_owners(902) unpack_nt_owners: validating owner_sids. [2004/03/17 15:37:45, 5] smbd/posix_acls.c:unpack_nt_owners(943) unpack_nt_owners: owner_sids validated. [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(161) fetch sid from uid cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] passdb/lookup_sid.c:sid_to_gid(459) sid_to_gid: winbind lookup for sid S-1-5-21-1040847125-2816864102-2560995485-21032 failed - trying local. [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(10016, 10017) : sec_ctx_stack_ndx = 1 [2004/03/17 15:37:45, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(728) : conn_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/03/17 15:37:45, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/03/17 15:37:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:45, 10] passdb/passdb.c:local_sid_to_gid(1271) local_sid_to_gid: Fall back to algorithmic mapping [2004/03/17 15:37:45, 3] passdb/passdb.c:local_sid_to_gid(1274) local_sid_to_gid: SID S-1-5-21-1040847125-2816864102-2560995485-21032 is *NOT* a group [2004/03/17 15:37:45, 10] passdb/lookup_sid.c:sid_to_gid(464) sid_to_gid: no one knows this SID [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_uid_from_cache(182) fetch uid from cache 10016 -> S-1-5-21-1040847125-2816864102-2560995485-21032 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:create_canon_ace_lists(1488) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER perms rwx [2004/03/17 15:37:45, 3] passdb/lookup_sid.c:fetch_gid_from_cache(256) fetch uid from cache 10017 -> S-1-5-21-1040847125-2816864102-2560995485-21035 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:create_canon_ace_lists(1488) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:create_canon_ace_lists(1488) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:check_owning_objs(1200) check_owning_objs: ACL is missing an owner entry. [2004/03/17 15:37:45, 10] smbd/posix_acls.c:check_owning_objs(1202) check_owning_objs: ACL is missing an owning group entry. [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - before merge canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - before merge [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - before deny canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - before deny [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - before valid canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - before valid [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(8A7FDA50) returning 0744 [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: file ace - return canon_ace index 0. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21032 uid 10016 (bryanw) SMB_ACL_USER_OBJ perms rwx canon_ace index 1. Type = allow SID = S-1-5-21-1040847125-2816864102-2560995485-21035 gid 10017 (10017) SMB_ACL_GROUP_OBJ perms r-- canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-- [2004/03/17 15:37:45, 10] smbd/posix_acls.c:print_canon_ace_list(586) print_canon_ace_list: dir ace - return [2004/03/17 15:37:45, 10] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2550) convert_canon_ace_to_posix_perms: converted u=700,g=400,w=400 to perm=0744 for file 8A7FDA50. [2004/03/17 15:37:45, 3] smbd/posix_acls.c:set_nt_acl(3147) set_nt_acl: chmod 8A7FDA50. perms = 0744. [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199190 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16643 smt_wct=3 smb_vwv[ 0]= 7550 (0x1D7E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=-1 fnum=7550 (numopen=4) [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 2 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x60080, port = 0x0, type= 0x0, file_id = 44567, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x12, desired_access = 0x7019f, port = 0x0, type= 0x0, file_id = 44563, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 1 for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file 8A7FDA50 has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file 8A7FDA50 (numopen=3) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7550 (18 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16643 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199191 of length 76 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16707 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 79 1D FE 03 ...y... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1022 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7545) level=1022 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 38, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 38, paramsize = 2, datasize = 38 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,102) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,102) wrote 102 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 77 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x4d [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199192 of length 81 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=16771 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 79 1D F5 03 00 00 00 58 01 ...y.... ..X. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2setfilepathinfo(2565) call_trans2setfilepathinfo(8) fundscore1003.xls (fnum 7545) info_level=1013 totdata=1 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 10] smbd/trans2.c:set_delete_on_close_internal(2362) set_delete_on_close_internal: Added delete on close flag for fnum = 7545, file fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/trans2.c:set_delete_on_close_over_all(2380) set_delete_on_close_over_all: Adding delete on close flag for fnum = 7545, file fundscore1003.xls [2004/03/17 15:37:45, 6] smbd/trans2.c:call_trans2setfilepathinfo(3045) actime: Wed Mar 17 15:37:41 2004 modtime: Wed Dec 31 18:00:00 1969 size: 17920 dosmode: 20 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,62) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,62) wrote 62 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199193 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16835 smt_wct=3 smb_vwv[ 0]= 7545 (0x1D79) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=34 fnum=7545 (numopen=3) [2004/03/17 15:37:45, 10] smbd/trans2.c:set_delete_on_close_over_all(2380) set_delete_on_close_over_all: Adding delete on close flag for fnum = 7545, file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x18040, desired_access = 0x30089, port = 0x0, type= 0x0, file_id = 44562, dev = 0x811, inode = 5275849 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/close.c:close_normal_file(187) close_file: file fundscore1003.xls. Delete on close was set - deleting file. [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=2) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7545 (17 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16835 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199194 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=16903 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 31 00 .1. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199195 of length 45 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16963 smt_wct=3 smb_vwv[ 0]= 7546 (0x1D7A) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_close(2567) close fd=36 fnum=7546 (numopen=2) [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x12, desired_access = 0x7019f, port = 0x0, type= 0x0, file_id = 44563, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file 8A7FDA50 has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file 8A7FDA50 (numopen=1) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7546 (16 used) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=16963 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 76 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x4c [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199196 of length 80 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=76 smb_com=0x6 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17027 smt_wct=1 smb_vwv[ 0]= 6 (0x6) smb_bcc=39 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 04 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBunlink (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_unlink(1498) reply_unlink : \fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(188) unix_convert begin: name = fundscore1003.xls, dirpath = , start = fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled fundscore1003.xls ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component fundscore1003.xls (len 17) ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled fundscore1003.xls ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component fundscore1003.xls (len 17) ? [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WIND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .bash_history [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .ssh [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: PUTTY.RND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0703.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0103.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: Outlook Tools [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: TreeSize.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: schema [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: putty.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: citrix_backup [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled fundscore1003.xls ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component fundscore1003.xls (len 17) ? [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(323) New file fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/reply.c:can_delete(1321) can_delete: ./fundscore1003.xls, dirtype = 6 [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/reply.c(1502) cmd=6 (SMBunlink) NT_STATUS_OBJECT_NAME_NOT_FOUND [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x6 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17027 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 98 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x62 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199197 of length 102 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=98 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17091 smt_wct=1 smb_vwv[ 0]= 22 (0x16) smb_bcc=61 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 04 5C 00 38 00 41 00 37 00 46 00 44 00 41 00 35 .\.8.A.7 .F.D.A.5 [010] 00 30 00 00 00 04 00 5C 00 66 00 75 00 6E 00 64 .0.....\ .f.u.n.d [020] 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 00 30 .s.c.o.r .e.1.0.0 [030] 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .3...x.l .s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBmv (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/reply.c:reply_mv(3723) reply_mv : \8A7FDA50 -> \fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\8A7FDA50" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/8A7FDA50] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [8A7FDA50] -> [8A7FDA50] [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [FUNDSCORE1003.XLS] [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(188) unix_convert begin: name = fundscore1003.xls, dirpath = , start = fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled fundscore1003.xls ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component fundscore1003.xls (len 17) ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled fundscore1003.xls ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component fundscore1003.xls (len 17) ? [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WIND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .bash_history [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: .ssh [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: 8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: PUTTY.RND [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0703.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0103.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: Outlook Tools [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: TreeSize.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: schema [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: putty.exe [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: citrix_backup [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled fundscore1003.xls ? [2004/03/17 15:37:45, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component fundscore1003.xls (len 17) ? [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(323) New file fundscore1003.xls [2004/03/17 15:37:45, 3] smbd/reply.c:rename_internals(3515) rename_internals: case_sensitive = 0, case_preserve = 1, short case preserve = 1, directory = ./8A7FDA50, newname = ./fundscore1003.xls, newname_last_component = fundscore1003.xls, is_8_3 = 1 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3457, fnum = 7553 (17 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = ./8A7FDA50, share_mode = 10, ofun = 1, mode = 0, oplock request = 0 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: ./8A7FDA50 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [./8A7FDA50] [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=00 [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file 8A7FDA50 read=Yes write=No (numopen=2) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 10 [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file 8A7FDA50. num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x10, desired_access = 0x10000, port = 0x0, type= 0x0, file_id = 44570, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x10, desired_access = 0x10000, port = 0x0, type= 0x0, file_id = 44570, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:45, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:45, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file 8A7FDA50 [2004/03/17 15:37:45, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file 8A7FDA50 has no outstanding locks. [2004/03/17 15:37:45, 2] smbd/close.c:close_normal_file(228) bryanw closed file 8A7FDA50 (numopen=1) [2004/03/17 15:37:45, 5] smbd/files.c:file_free(385) freed files structure 7553 (16 used) [2004/03/17 15:37:45, 3] smbd/reply.c:rename_internals(3609) rename_internals: succeeded doing rename on 8A7FDA50 -> ./fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/reply.c:rename_open_files(3328) rename_open_files: no open files on dev 811, inode 5275707 for ./fundscore1003.xls [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_check_notify(99) kernel_check_notify: kernel change notify on . fd[0]=26 (signals_received=1) [2004/03/17 15:37:45, 10] smbd/notify.c:process_pending_change_notify_queue(161) process_pending_change_notify_queue: dir . changed ! [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/03/17 15:37:45, 3] smbd/error.c:error_packet(118) error packet at smbd/notify.c(55) cmd=160 (SMBnttrans) NT code 0x0000010c [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_remove_notify(144) kernel_remove_notify: fd=-1 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=35 smb_com=0x7 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17091 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:45, 10] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/03/17 15:37:45, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199198 of length 88 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=17159 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 3 (0x3) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 7512 (0x1D58) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 20 .. [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 03 00 00 00 58 1D 01 00 ....X... [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1511) call_nt_transact_notify_change [2004/03/17 15:37:45, 3] smbd/notify_kernel.c:kernel_register_notify(189) kernel change notify on . (ntflags=0x3 flags=0x1e) fd=26 [2004/03/17 15:37:45, 3] smbd/nttrans.c:call_nt_transact_notify_change(1523) call_nt_transact_notify_change: notify change called on directory name = . [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 122 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7a [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199199 of length 126 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=122 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17219 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9216 (0x2400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=39 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:45, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x2019f, share access 0x3, file attributes 0x80 to open_mode 0x42 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [FUNDSCORE1003.XLS] [2004/03/17 15:37:45, 5] smbd/statcache.c:stat_cache_add(178) stat_cache_add: Added entry FUNDSCORE1003.XLS -> fundscore1003.xls [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(183) conversion finished fundscore1003.xls -> fundscore1003.xls [2004/03/17 15:37:45, 3] smbd/dosmode.c:unix_mode(110) unix_mode(fundscore1003.xls) returning 0744 [2004/03/17 15:37:45, 5] smbd/files.c:file_new(122) allocated file structure 3458, fnum = 7554 (17 used) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = fundscore1003.xls, share_mode = 42, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x2 flags2=0x0 mode=0744 [2004/03/17 15:37:45, 10] smbd/open.c:fd_open(45) fd_open: name fundscore1003.xls, flags = 02 mode = 0744, fd = 34. [2004/03/17 15:37:45, 2] smbd/open.c:open_file(240) BryanW opened file fundscore1003.xls read=Yes write=Yes (numopen=2) [2004/03/17 15:37:45, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 42 [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file fundscore1003.xls, dev = 811, inode = 5275707, file_id = 44571 [2004/03/17 15:37:45, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file fundscore1003.xls, dev = 811, inode = 5275707, file_id = 44571, tv_sec = 4058c529, tv_usec = 8292d [2004/03/17 15:37:45, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file fundscore1003.xls. num_share_modes = 1 [2004/03/17 15:37:45, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x42, desired_access = 0x2019f, port = 0x81ac, type= 0x3, file_id = 44571, dev = 0x811, inode = 5275707 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7554, open name = fundscore1003.xls [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17219 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=33282 (0x8202) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199200 of length 63 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17283 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7554 (0x1D82) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=4096 unlocked for file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File fundscore1003.xls, offset = 0, count = 4096, type = READ [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 4096 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 12 0 4096 0 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 12 0 4096 0 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=4096 unlocked for file fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/fileio.c:read_file(101) read_file (fundscore1003.xls): pos = 0, size = 4096, returned 4096 [2004/03/17 15:37:45, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7554 max=4096 nread=4096 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17283 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 3E 00 03 00 FE FF 09 00 ........ >....... [020] 06 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ ........ [030] 21 00 00 00 00 00 00 00 00 10 00 00 FE FF FF FF !....... ........ [040] 00 00 00 00 FE FF FF FF 00 00 00 00 20 00 00 00 ........ .... ... [050] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [060] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [070] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [080] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [090] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [100] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [110] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [120] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [130] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [140] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [150] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [160] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [170] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [180] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [190] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,4159) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,4159) wrote 4159 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199201 of length 63 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17347 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7554 (0x1D82) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1536 (0x600) smb_vwv[ 6]= 1536 (0x600) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 1536 (0x600) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=16384 len=1536 unlocked for file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File fundscore1003.xls, offset = 16384, count = 1536, type = READ [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 16384, count_out = 1536 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 12 16384 1536 0 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 12 16384 1536 0 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=16384 len=1536 unlocked for file fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/fileio.c:read_file(101) read_file (fundscore1003.xls): pos = 16384, size = 1536, returned 1536 [2004/03/17 15:37:45, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7554 max=1536 nread=1536 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=1595 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17347 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1536 (0x600) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=1536 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,1599) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,1599) wrote 1599 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199202 of length 76 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17411 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 05 82 1D EC 03 ....... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7554) level=1004 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:45 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199203 of length 63 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17475 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7554 (0x1D82) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(78) is_locked: brl start=4096 len=8192 unlocked for file fundscore1003.xls [2004/03/17 15:37:45, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File fundscore1003.xls, offset = 4096, count = 8192, type = READ [2004/03/17 15:37:45, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 4096, count_out = 8192 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 12 4096 8192 0 [2004/03/17 15:37:45, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 12 4096 8192 0 [2004/03/17 15:37:45, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:45, 10] locking/locking.c:is_locked(90) is_locked: posix start=4096 len=8192 unlocked for file fundscore1003.xls [2004/03/17 15:37:45, 10] smbd/fileio.c:read_file(101) read_file (fundscore1003.xls): pos = 4096, size = 8192, returned 8192 [2004/03/17 15:37:45, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7554 max=8192 nread=8192 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=8251 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17475 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=8192 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 00 00 00 00 00 00 00 00 00 01 04 00 05 DC ........ ........ [010] 00 34 02 43 FF 80 05 02 00 01 00 EA 0A 6F 08 64 .4.C.... .....o.d [020] 00 01 00 0F 00 58 02 01 00 01 00 58 02 03 00 01 .....X.. ...X.... [030] 00 4C 00 65 00 74 00 74 00 65 00 72 00 00 00 00 .L.e.t.t .e.r.... [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ........ ........ [080] 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 01 ........ ........ [090] 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 44 49 4E 55 22 00 00 00 34 .......D INU"...4 [0B0] 02 00 00 4D A5 9F D4 00 00 00 00 00 00 00 00 00 ...M.... ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 09 00 00 00 01 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,8255) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,8255) wrote 8255 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199204 of length 76 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17539 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 00 00 05 82 1D EC 03 ....... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7554) level=1004 call=7 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:45 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199205 of length 116 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17603 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:45 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:45, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:45, 3] smbd/process.c:process_smb(890) Transaction 1199206 of length 116 [2004/03/17 15:37:45, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:45, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17667 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:45, 10] lib/util.c:dump_data(1830) [000] 02 00 00 0A 04 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:45, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:45, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1034 [2004/03/17 15:37:45, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:45, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1034 call=5 total_data=0 [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:45, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:45, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 56, useable_space = 131010 [2004/03/17 15:37:45, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 56, paramsize = 2, datasize = 56 [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(407) write_socket(15,120) [2004/03/17 15:37:45, 6] lib/util_sock.c:write_socket(410) write_socket(15,120) wrote 120 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 118 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x76 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199207 of length 122 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=118 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17731 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8192 (0x2000) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=35 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 .\.W.I.N .D.O.W.S [010] 00 5C 00 77 00 69 00 6E 00 2E 00 69 00 6E 00 69 .\.w.i.n ...i.n.i [020] 00 00 00 ... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20089, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\win.ini" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/win.ini] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS/WIN.INI] -> [WINDOWS/win.ini] [2004/03/17 15:37:47, 3] smbd/dosmode.c:unix_mode(110) unix_mode(WINDOWS/win.ini) returning 0744 [2004/03/17 15:37:47, 5] smbd/files.c:file_new(122) allocated file structure 3459, fnum = 7555 (18 used) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = WINDOWS/win.ini, share_mode = 8040, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINDOWS/win.ini] [2004/03/17 15:37:47, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:47, 10] smbd/open.c:fd_open(45) fd_open: name WINDOWS/win.ini, flags = 00 mode = 0744, fd = 36. [2004/03/17 15:37:47, 2] smbd/open.c:open_file(240) BryanW opened file WINDOWS/win.ini read=Yes write=No (numopen=3) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file WINDOWS/win.ini, dev = 811, inode = 14942265, file_id = 44572 [2004/03/17 15:37:47, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file WINDOWS/win.ini, dev = 811, inode = 14942265, file_id = 44572, tv_sec = 4058c52b, tv_usec = 7fb91 [2004/03/17 15:37:47, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file WINDOWS/win.ini. num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44572, dev = 0x811, inode = 14942265 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: WINDOWS/win.ini [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7555, open name = WINDOWS/win.ini [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17731 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=33538 (0x8302) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=11261 (0x2BFD) smb_vwv[ 7]=23733 (0x5CB5) smb_vwv[ 8]=50170 (0xC3FA) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=19949 (0x4DED) smb_vwv[11]=26644 (0x6814) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=11261 (0x2BFD) smb_vwv[15]=23733 (0x5CB5) smb_vwv[16]=50170 (0xC3FA) smb_vwv[17]= 1 (0x1) smb_vwv[18]=11261 (0x2BFD) smb_vwv[19]=23733 (0x5CB5) smb_vwv[20]=50170 (0xC3FA) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=37120 (0x9100) smb_vwv[28]= 4 (0x4) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199208 of length 63 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17795 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7555 (0x1D83) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1169 (0x491) smb_vwv[ 6]= 1169 (0x491) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 1169 (0x491) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=1169 unlocked for file WINDOWS/win.ini [2004/03/17 15:37:47, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File WINDOWS/win.ini, offset = 0, count = 1169, type = READ [2004/03/17 15:37:47, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 1169 [2004/03/17 15:37:47, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 36 12 0 1169 0 [2004/03/17 15:37:47, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 36 12 0 1169 0 [2004/03/17 15:37:47, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:47, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=1169 unlocked for file WINDOWS/win.ini [2004/03/17 15:37:47, 10] smbd/fileio.c:read_file(101) read_file (WINDOWS/win.ini): pos = 0, size = 1169, returned 1169 [2004/03/17 15:37:47, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7555 max=1169 nread=1169 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=1228 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=17795 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1169 (0x491) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=1169 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 3B 20 66 6F 72 20 31 36 2D 62 69 74 20 61 70 70 ; for 16 -bit app [010] 20 73 75 70 70 6F 72 74 0D 0A 5B 66 6F 6E 74 73 support ..[fonts [020] 5D 0D 0A 5B 65 78 74 65 6E 73 69 6F 6E 73 5D 0D ]..[exte nsions]. [030] 0A 5B 6D 63 69 20 65 78 74 65 6E 73 69 6F 6E 73 .[mci ex tensions [040] 5D 0D 0A 5B 66 69 6C 65 73 5D 0D 0A 5B 4D 61 69 ]..[file s]..[Mai [050] 6C 5D 0D 0A 4D 41 50 49 3D 31 0D 0A 43 4D 43 3D l]..MAPI =1..CMC= [060] 31 0D 0A 43 4D 43 44 4C 4C 4E 41 4D 45 33 32 3D 1..CMCDL LNAME32= [070] 6D 61 70 69 33 32 2E 64 6C 6C 0D 0A 43 4D 43 44 mapi32.d ll..CMCD [080] 4C 4C 4E 41 4D 45 3D 6D 61 70 69 2E 64 6C 6C 0D LLNAME=m api.dll. [090] 0A 4D 41 50 49 58 3D 31 0D 0A 4D 41 50 49 58 56 .MAPIX=1 ..MAPIXV [0A0] 45 52 3D 31 2E 30 2E 30 2E 31 0D 0A 4F 4C 45 4D ER=1.0.0 .1..OLEM [0B0] 65 73 73 61 67 69 6E 67 3D 31 0D 0A 5B 4D 43 49 essaging =1..[MCI [0C0] 20 45 78 74 65 6E 73 69 6F 6E 73 2E 42 41 4B 5D Extensi ons.BAK] [0D0] 0D 0A 61 73 66 3D 4D 50 45 47 56 69 64 65 6F 0D ..asf=MP EGVideo. [0E0] 0A 61 73 78 3D 4D 50 45 47 56 69 64 65 6F 0D 0A .asx=MPE GVideo.. [0F0] 69 76 66 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D ivf=MPEG Video..m [100] 33 75 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 3u=MPEGV ideo..mp [110] 32 76 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 2v=MPEGV ideo..mp [120] 33 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 76 3=MPEGVi deo..mpv [130] 32 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 77 61 78 2=MPEGVi deo..wax [140] 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 77 6D 3D 4D =MPEGVid eo..wm=M [150] 50 45 47 56 69 64 65 6F 0D 0A 77 6D 61 3D 4D 50 PEGVideo ..wma=MP [160] 45 47 56 69 64 65 6F 0D 0A 77 6D 76 3D 4D 50 45 EGVideo. .wmv=MPE [170] 47 56 69 64 65 6F 0D 0A 77 76 78 3D 4D 50 45 47 GVideo.. wvx=MPEG [180] 56 69 64 65 6F 0D 0A 5B 57 69 6E 5A 69 70 5D 0D Video..[ WinZip]. [190] 0A 4E 6F 74 65 2D 31 3D 54 68 69 73 20 73 65 63 .Note-1= This sec [1A0] 74 69 6F 6E 20 69 73 20 72 65 71 75 69 72 65 64 tion is required [1B0] 20 6F 6E 6C 79 20 74 6F 20 69 6E 73 74 61 6C 6C only to install [1C0] 20 74 68 65 20 6F 70 74 69 6F 6E 61 6C 20 57 69 the opt ional Wi [1D0] 6E 5A 69 70 20 49 6E 74 65 72 6E 65 74 20 42 72 nZip Int ernet Br [1E0] 6F 77 73 65 72 20 53 75 70 70 6F 72 74 20 62 75 owser Su pport bu [1F0] 69 6C 64 20 30 32 33 31 2E 0D 0A 4E 6F 74 65 2D ild 0231 ...Note- [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,1232) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,1232) wrote 1232 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 86 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x56 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199209 of length 90 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=86 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=17859 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=21 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 54 00 16 00 56 05 06 00 04 01 00 00 00 00 5C .T...V.. .......\ [010] 00 2A 00 00 00 .*... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2findfirst(951) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 260, max_data_bytes = 16384 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\*" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/*] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [*] [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(188) unix_convert begin: name = *, dirpath = , start = * [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled * ? [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component * (len 1) ? [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:is_mangled(269) is_mangled * ? [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component * (len 1) ? [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(323) New file * [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: * [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [*] [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2findfirst(993) dir=./, mask = * [2004/03/17 15:37:47, 5] smbd/dir.c:start_dir(334) start_dir dir=./ [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./ [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [./] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WIND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: .bash_history [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: .ssh [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: PUTTY.RND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0703.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0103.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: Outlook Tools [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: TreeSize.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: schema [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: putty.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: citrix_backup [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path ./, expect_close = 1 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2findfirst(1023) dptr_num is 256, wcard = *, attr = 22 [2004/03/17 15:37:47, 8] smbd/trans2.c:call_trans2findfirst(1028) dirpath=<./> dontdescend=<> [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 1 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,.) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./. fname=. [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 2 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,.) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./.. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./.. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./.. fname=.. [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 3 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,WIND) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./WIND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./WIND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./WIND fname=WIND [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 4 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,fundscore1003.xls) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./fundscore1003.xls fname=fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: fundscore1003.xls -> 746A2FEA -> FWAU22~2.XLS (cache=1) [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 5 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,.bash_history) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./.bash_history [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning h [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./.bash_history fname=.bash_history [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: .bash_history -> 6765AD42 -> _SOT00~2 (cache=1) [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 6 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,.ssh) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./.ssh [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning hd [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./.ssh fname=.ssh [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 7 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,WINDOWS) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./WINDOWS [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./WINDOWS [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./WINDOWS fname=WINDOWS [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 8 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,PUTTY.RND) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./PUTTY.RND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./PUTTY.RND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./PUTTY.RND fname=PUTTY.RND [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 9 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,fundscore0703.xls) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./fundscore0703.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./fundscore0703.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./fundscore0703.xls fname=fundscore0703.xls [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: fundscore0703.xls -> 1815E512 -> F6OL0C~Y.XLS (cache=1) [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 10 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,fundscore0103.xls) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./fundscore0103.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./fundscore0103.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./fundscore0103.xls fname=fundscore0103.xls [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: fundscore0103.xls -> 1C242C44 -> F7T3FW~K.XLS (cache=1) [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 11 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,Outlook Tools) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./Outlook Tools [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./Outlook Tools [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./Outlook Tools fname=Outlook Tools [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: Outlook Tools -> 6BC3BAAB -> OTWFHK~B (cache=1) [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 12 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,TreeSize.exe) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./TreeSize.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./TreeSize.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./TreeSize.exe fname=TreeSize.exe [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 13 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,schema) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./schema [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./schema [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./schema fname=schema [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 14 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,putty.exe) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./putty.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./putty.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./putty.exe fname=putty.exe [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 15 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,citrix_backup) -> 0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./citrix_backup [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./citrix_backup [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning d [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./citrix_backup fname=citrix_backup [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: citrix_backup -> 3313047D -> CE6607~1 (cache=1) [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 15 [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2findfirst(1074) call_trans2findfirst - (2) closing dptr_num 256 [2004/03/17 15:37:47, 4] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 10, data_sent_thistime = 1708, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 10, data_to_send = 1708, paramsize = 10, datasize = 1708 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,1780) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,1780) wrote 1780 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2findfirst(1104) SMBtrans2 mask=* directory=./ dirtype=22 numentries=15 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 118 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x76 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199210 of length 122 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=118 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=2136 smb_uid=728 smb_mid=17923 smt_wct=15 smb_vwv[ 0]= 50 (0x32) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 50 (0x32) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=53 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 02 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F 00 72 .f.u.n.d .s.c.o.r [020] 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 00 6C .e.1.0.0 .3...x.l [030] 00 73 00 00 00 .s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2findfirst(951) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 260, max_data_bytes = 16384 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2findfirst(993) dir=./, mask = fundscore1003.xls [2004/03/17 15:37:47, 5] smbd/dir.c:start_dir(334) start_dir dir=./ [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./ [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [./] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WIND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: .bash_history [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: .ssh [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: PUTTY.RND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0703.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0103.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: Outlook Tools [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: TreeSize.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: schema [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: putty.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: citrix_backup [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path ./, expect_close = 1 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2findfirst(1023) dptr_num is 256, wcard = fundscore1003.xls, attr = 22 [2004/03/17 15:37:47, 8] smbd/trans2.c:call_trans2findfirst(1028) dirpath=<./> dontdescend=<> [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 1 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(fundscore1003.xls,.) -> -1 [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 2 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(fundscore1003.xls,.) -> -1 [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 3 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(fundscore1003.xls,WIND) -> -1 [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x84c4798 now at offset 4 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./fundscore1003.xls fname=fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: fundscore1003.xls -> 746A2FEA -> FWAU22~2.XLS (cache=1) [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2findfirst(1074) call_trans2findfirst - (2) closing dptr_num 256 [2004/03/17 15:37:47, 4] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 10, data_sent_thistime = 128, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 10, data_to_send = 128, paramsize = 10, datasize = 128 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,200) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,200) wrote 200 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2findfirst(1104) SMBtrans2 mask=fundscore1003.xls directory=./ dirtype=22 numentries=1 [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: fundscore1003.xls -> 746A2FEA -> FWAU22~2.XLS (cache=1) [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199211 of length 116 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=17987 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:45 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199212 of length 116 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18051 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 54 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E .T...... .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:45 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199213 of length 116 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18115 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 54 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E .T...... .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:45 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199214 of length 45 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18179 smt_wct=3 smb_vwv[ 0]= 7554 (0x1D82) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/reply.c:reply_close(2567) close fd=34 fnum=7554 (numopen=3) [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x42, desired_access = 0x2019f, port = 0x81ac, type= 0x3, file_id = 44571, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:47, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file fundscore1003.xls, dev = 811, inode = 5275707 file_id = 44571 has kernel oplock state of 1. [2004/03/17 15:37:47, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:47, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=2) [2004/03/17 15:37:47, 5] smbd/files.c:file_free(385) freed files structure 7554 (17 used) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18179 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 118 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x76 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199215 of length 122 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=118 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18244 smt_wct=15 smb_vwv[ 0]= 50 (0x32) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 50 (0x32) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=53 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F 00 72 .f.u.n.d .s.c.o.r [020] 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 00 6C .e.1.0.0 .3...x.l [030] 00 73 00 00 00 .s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2findfirst(951) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 260, max_data_bytes = 16384 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2findfirst(993) dir=./, mask = fundscore1003.xls [2004/03/17 15:37:47, 5] smbd/dir.c:start_dir(334) start_dir dir=./ [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./ [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [./] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WIND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: .bash_history [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: .ssh [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: PUTTY.RND [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0703.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore0103.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: Outlook Tools [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: TreeSize.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: schema [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: putty.exe [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: citrix_backup [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path ./, expect_close = 1 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2findfirst(1023) dptr_num is 256, wcard = fundscore1003.xls, attr = 22 [2004/03/17 15:37:47, 8] smbd/trans2.c:call_trans2findfirst(1028) dirpath=<./> dontdescend=<> [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x86b65c8 now at offset 1 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(fundscore1003.xls,.) -> -1 [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x86b65c8 now at offset 2 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(fundscore1003.xls,.) -> -1 [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x86b65c8 now at offset 3 [2004/03/17 15:37:47, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(fundscore1003.xls,WIND) -> -1 [2004/03/17 15:37:47, 8] smbd/trans2.c:get_lanman2_dir_entry(521) get_lanman2_dir_entry:readdir on dirptr 0x86b65c8 now at offset 4 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: ./fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: ./fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:get_lanman2_dir_entry(606) get_lanman2_dir_entry found ./fundscore1003.xls fname=fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: fundscore1003.xls -> 746A2FEA -> FWAU22~2.XLS (cache=1) [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2findfirst(1074) call_trans2findfirst - (2) closing dptr_num 256 [2004/03/17 15:37:47, 4] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 10, data_sent_thistime = 128, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 10, data_to_send = 128, paramsize = 10, datasize = 128 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,200) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,200) wrote 200 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2findfirst(1104) SMBtrans2 mask=fundscore1003.xls directory=./ dirtype=22 numentries=1 [2004/03/17 15:37:47, 10] smbd/mangle_hash2.c:name_map(612) name_map: fundscore1003.xls -> 746A2FEA -> FWAU22~2.XLS (cache=1) [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 122 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7a [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199216 of length 126 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=122 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18307 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9216 (0x2400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=39 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20089, share access 0x7, file attributes 0x80 to open_mode 0x8040 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/dosmode.c:unix_mode(110) unix_mode(fundscore1003.xls) returning 0744 [2004/03/17 15:37:47, 5] smbd/files.c:file_new(122) allocated file structure 3460, fnum = 7556 (18 used) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = fundscore1003.xls, share_mode = 8040, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:47, 10] smbd/open.c:fd_open(45) fd_open: name fundscore1003.xls, flags = 00 mode = 0744, fd = 34. [2004/03/17 15:37:47, 2] smbd/open.c:open_file(240) BryanW opened file fundscore1003.xls read=Yes write=No (numopen=3) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file fundscore1003.xls, dev = 811, inode = 5275707, file_id = 44573 [2004/03/17 15:37:47, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file fundscore1003.xls, dev = 811, inode = 5275707, file_id = 44573, tv_sec = 4058c52b, tv_usec = 8a1db [2004/03/17 15:37:47, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file fundscore1003.xls. num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44573, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7556, open name = fundscore1003.xls [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18307 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=33794 (0x8402) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=32538 (0x7F1A) smb_vwv[11]=26645 (0x6815) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199217 of length 76 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18371 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 2046 (0x7FE) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 6F 00 84 1D FE 03 .o..... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1022 [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7556) level=1022 call=7 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 38, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 38, paramsize = 2, datasize = 38 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,102) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,102) wrote 102 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 72 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x48 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199218 of length 76 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18435 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 73 00 84 1D EC 03 .s..... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = 7556) level=1004 call=7 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:45 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199219 of length 63 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18499 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7556 (0x1D84) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=4096 unlocked for file fundscore1003.xls [2004/03/17 15:37:47, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File fundscore1003.xls, offset = 0, count = 4096, type = READ [2004/03/17 15:37:47, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 4096 [2004/03/17 15:37:47, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 12 0 4096 0 [2004/03/17 15:37:47, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 12 0 4096 0 [2004/03/17 15:37:47, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:47, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=4096 unlocked for file fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/fileio.c:read_file(101) read_file (fundscore1003.xls): pos = 0, size = 4096, returned 4096 [2004/03/17 15:37:47, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7556 max=4096 nread=4096 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=4155 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18499 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4096 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 3E 00 03 00 FE FF 09 00 ........ >....... [020] 06 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ ........ [030] 21 00 00 00 00 00 00 00 00 10 00 00 FE FF FF FF !....... ........ [040] 00 00 00 00 FE FF FF FF 00 00 00 00 20 00 00 00 ........ .... ... [050] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [060] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [070] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [080] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [090] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [100] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [110] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [120] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [130] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [140] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [150] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [160] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [170] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [180] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [190] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,4159) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,4159) wrote 4159 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199220 of length 45 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18563 smt_wct=3 smb_vwv[ 0]= 7556 (0x1D84) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/reply.c:reply_close(2567) close fd=34 fnum=7556 (numopen=3) [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44573, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:47, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file fundscore1003.xls, dev = 811, inode = 5275707 file_id = 44573 has kernel oplock state of 1. [2004/03/17 15:37:47, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:47, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=2) [2004/03/17 15:37:47, 5] smbd/files.c:file_free(385) freed files structure 7556 (17 used) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18563 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 100 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x64 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199221 of length 104 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=18628 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /tmp [2004/03/17 15:37:47, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2004/03/17 15:37:47, 4] smbd/nttrans.c:nt_open_pipe(486) nt_open_pipe: Opening pipe \srvsvc. [2004/03/17 15:37:47, 3] smbd/nttrans.c:nt_open_pipe(503) nt_open_pipe: Known pipe srvsvc opening. [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/03/17 15:37:47, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/03/17 15:37:47, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 7751 (pipes_open=1) [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=7751 [2004/03/17 15:37:47, 5] smbd/nttrans.c:do_ntcreate_pipe_open(554) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=18628 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=20736 (0x5100) smb_vwv[ 3]= 375 (0x177) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 122 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7a [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199222 of length 126 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=122 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18691 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9216 (0x2400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 256 (0x100) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=39 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw/ [2004/03/17 15:37:47, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20089, share access 0x1, file attributes 0x80 to open_mode 0x20 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/dosmode.c:unix_mode(110) unix_mode(fundscore1003.xls) returning 0744 [2004/03/17 15:37:47, 5] smbd/files.c:file_new(122) allocated file structure 3461, fnum = 7557 (18 used) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = fundscore1003.xls, share_mode = 20, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:47, 10] smbd/open.c:fd_open(45) fd_open: name fundscore1003.xls, flags = 00 mode = 0744, fd = 34. [2004/03/17 15:37:47, 2] smbd/open.c:open_file(240) BryanW opened file fundscore1003.xls read=Yes write=No (numopen=3) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 20 [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file fundscore1003.xls, dev = 811, inode = 5275707, file_id = 44574 [2004/03/17 15:37:47, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file fundscore1003.xls, dev = 811, inode = 5275707, file_id = 44574, tv_sec = 4058c52b, tv_usec = 8f07b [2004/03/17 15:37:47, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file fundscore1003.xls. num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x20, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44574, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7557, open name = fundscore1003.xls [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=18691 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34050 (0x8502) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=45127 (0xB047) smb_vwv[11]=26646 (0x6816) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 156 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x9c [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199223 of length 160 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=18756 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30545 (0x7751) smb_bcc=89 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 39 .\.P.I.P .E.\...9 [010] 39 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 9....... .H...... [020] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ [030] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. [040] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [050] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /tmp [2004/03/17 15:37:47, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=72 params=0 setup=2 [2004/03/17 15:37:47, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/03/17 15:37:47, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/03/17 15:37:47, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153) search for pipe pnum=7751 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) pipe name srvsvc pnum=7751 (pipes_open=1) [2004/03/17 15:37:47, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "srvsvc" (pnum 7751)api_fd_reply: p:0x83f3598 max_trans_reply: 1024 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 7751 name: srvsvc open: Yes len: 72 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0b [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0048 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 11, flags = 3 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 11 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(849) api_pipe_bind_req: decode request. 849 [2004/03/17 15:37:47, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(860) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 num_elements: 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000c context_id : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 000e num_syntaxes: 01 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_uuid uuid [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 data : 4b324fc8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 data : 1670 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 data : 01d3 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 data : 12 78 5a 47 bf 6e e1 88 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 version: 00000003 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_uuid uuid [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 data : 8a885d04 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0028 data : 1ceb [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002a data : 11c9 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002c data : 9f e8 08 00 2b 10 48 60 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 version: 00000002 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(990) api_pipe_bind_req: make response. 990 [2004/03/17 15:37:47, 3] rpc_server/srv_pipe.c:check_bind_req(732) check_bind_req for \PIPE\srvsvc [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 000053f0 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 len: 000d [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000a str: \PIPE\ntsvcs. [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0018 num_results: 01 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001c result : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e reason : 0000 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_uuid uuid [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 data : 8a885d04 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0024 data : 1ceb [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0026 data : 11c9 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0028 data : 9f e8 08 00 2b 10 48 60 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 version: 00000002 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0c [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0044 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 56 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 7751 name: srvsvc len: 1024 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(970) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2004/03/17 15:37:47, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..68] [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=18756 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 \ntsvcs. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,128) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,128) wrote 128 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199224 of length 63 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18819 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7557 (0x1D85) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=17920 (0x4600) smb_vwv[ 6]=17920 (0x4600) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=17920 (0x4600) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw/ [2004/03/17 15:37:47, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=17920 unlocked for file fundscore1003.xls [2004/03/17 15:37:47, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File fundscore1003.xls, offset = 0, count = 17920, type = READ [2004/03/17 15:37:47, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 17920 [2004/03/17 15:37:47, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 12 0 17920 0 [2004/03/17 15:37:47, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 12 0 17920 0 [2004/03/17 15:37:47, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:47, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=17920 unlocked for file fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/fileio.c:read_file(101) read_file (fundscore1003.xls): pos = 0, size = 17920, returned 17920 [2004/03/17 15:37:47, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7557 max=17920 nread=17920 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=17979 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=18819 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=17920 (0x4600) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=17920 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00 ........ ........ [010] 00 00 00 00 00 00 00 00 3E 00 03 00 FE FF 09 00 ........ >....... [020] 06 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ ........ [030] 21 00 00 00 00 00 00 00 00 10 00 00 FE FF FF FF !....... ........ [040] 00 00 00 00 FE FF FF FF 00 00 00 00 20 00 00 00 ........ .... ... [050] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [060] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [070] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [080] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [090] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [0F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [100] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [110] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [120] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [130] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [140] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [150] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [160] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [170] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [180] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [190] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1A0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1B0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1C0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1D0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1E0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [1F0] FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........ ........ [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,17983) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,17983) wrote 17983 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 176 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb0 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199225 of length 180 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=18884 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 92 (0x5C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 92 (0x5C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30545 (0x7751) smb_bcc=109 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 39 .\.P.I.P .E.\...9 [010] 39 05 00 00 03 10 00 00 00 5C 00 00 00 01 00 00 9....... .\...... [020] 00 44 00 00 00 00 00 10 00 24 CD 0C 05 09 00 00 .D...... .$...... [030] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 61 00 6D ........ .\.\.a.m [040] 00 61 00 6E 00 64 00 61 00 00 00 00 00 07 00 00 .a.n.d.a ........ [050] 00 00 00 00 00 07 00 00 00 42 00 72 00 79 00 61 ........ .B.r.y.a [060] 00 6E 00 57 00 00 00 00 00 01 00 00 00 .n.W.... ..... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /tmp [2004/03/17 15:37:47, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=92 params=0 setup=2 [2004/03/17 15:37:47, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/03/17 15:37:47, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/03/17 15:37:47, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153) search for pipe pnum=7751 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) pipe name srvsvc pnum=7751 (pipes_open=1) [2004/03/17 15:37:47, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "srvsvc" (pnum 7751)api_fd_reply: p:0x83f3598 max_trans_reply: 1024 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 7751 name: srvsvc open: Yes len: 92 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 92 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 92 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 76 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 76 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 005c [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 76 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 76, incoming data = 76 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000044 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0010 [2004/03/17 15:37:47, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_pipe_request(1468) Requested \PIPE\srvsvc [2004/03/17 15:37:47, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2004/03/17 15:37:47, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528) api_rpc_cmds[7].fn == 0x80fa884 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_get_info [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr_srv_name: 050ccd24 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 00000009 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 00000009 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.a.m.a.n.d.a... [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000022 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 uni_max_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c uni_str_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0030 buffer : B.r.y.a.n.W... [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 info_level: 00000001 [2004/03/17 15:37:47, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1391) _srv_net_share_get_info: 1391 [2004/03/17 15:37:47, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(737) init_srv_r_net_share_get_info: 737 [2004/03/17 15:37:47, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: bryanw 0 Home Directories [2004/03/17 15:37:47, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2004/03/17 15:37:47, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1397) _srv_net_share_get_info: 1397 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_get_info [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_info info [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 switch_value : 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr_share_ctr: 00000001 [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_share_info1 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 ptr_netname: 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c type : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 ptr_remark : 00000001 [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 srv_io_share_info1_str [2004/03/17 15:37:47, 8] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 uni_max_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c uni_str_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0020 buffer : b.r.y.a.n.w... [2004/03/17 15:37:47, 8] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 uni_max_len: 00000011 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0038 uni_str_len: 00000011 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 003c buffer : H.o.m.e. .D.i.r.e.c.t.o.r.i.e.s... [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_werror(695) 0060 status: WERR_OK [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549) api_rpcTNP: called srvsvc successfully [2004/03/17 15:37:47, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 1056 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 76 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 7751 name: srvsvc len: 1024 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 100. [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 007c [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000064 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/03/17 15:37:47, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..124] [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=18884 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 124 (0x7C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 124 (0x7C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=125 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 05 00 02 03 10 00 00 00 7C 00 00 00 01 00 00 ........ .|...... [010] 00 64 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .d...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 07 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 62 00 72 00 79 00 61 ........ .b.r.y.a [040] 00 6E 00 77 00 00 00 00 00 11 00 00 00 00 00 00 .n.w.... ........ [050] 00 11 00 00 00 48 00 6F 00 6D 00 65 00 20 00 44 .....H.o .m.e. .D [060] 00 69 00 72 00 65 00 63 00 74 00 6F 00 72 00 69 .i.r.e.c .t.o.r.i [070] 00 65 00 73 00 00 00 00 00 00 00 00 00 .e.s.... ..... [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,184) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,184) wrote 184 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199226 of length 45 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=65279 smb_uid=728 smb_mid=18948 smt_wct=3 smb_vwv[ 0]=30545 (0x7751) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153) search for pipe pnum=7751 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) pipe name srvsvc pnum=7751 (pipes_open=1) [2004/03/17 15:37:47, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:7751 [2004/03/17 15:37:47, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=7751 (pipes_open=0) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=65279 smb_uid=728 smb_mid=18948 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199227 of length 116 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19012 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw/ [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:47 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 70 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x46 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199228 of length 74 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19076 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 00 00 02 01 ..... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfsinfo(1393) call_trans2qfsinfo: level = 258 [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2qfsinfo(1496) call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 6, vol=bryanw serv=bryanw [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 0, data_sent_thistime = 30, useable_space = 131012 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 0, data_to_send = 30, paramsize = 0, datasize = 30 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,90) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,90) wrote 90 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2qfsinfo(1676) SMBtrans2 info_level = 258 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199229 of length 116 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19140 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 104 (0x68) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EC 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Wed Mar 17 15:37:45 2004 access: Wed Mar 17 15:37:47 2004 write: Wed Mar 17 15:37:45 2004 change: Wed Mar 17 15:37:45 2004 mode: 20 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199230 of length 116 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19204 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EE 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1006 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1006 call=5 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,72) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,72) wrote 72 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 112 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x70 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199231 of length 116 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=112 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19268 smt_wct=15 smb_vwv[ 0]= 44 (0x2C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 32 (0x20) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 44 (0x2C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=47 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 02 00 00 EF 03 00 00 00 00 5C 00 66 00 75 00 6E ........ .\.f.u.n [010] 00 64 00 73 00 63 00 6F 00 72 00 65 00 31 00 30 .d.s.c.o .r.e.1.0 [020] 00 30 00 33 00 2E 00 78 00 6C 00 73 00 00 00 .0.3...x .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo fundscore1003.xls (fnum = -1) level=1007 call=5 total_data=0 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 131010 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,68) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,68) wrote 68 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 122 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7a [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199232 of length 126 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=122 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19332 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9216 (0x2400) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=39 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 66 00 75 00 6E 00 64 00 73 00 63 00 6F .\.f.u.n .d.s.c.o [010] 00 72 00 65 00 31 00 30 00 30 00 33 00 2E 00 78 .r.e.1.0 .0.3...x [020] 00 6C 00 73 00 00 00 .l.s... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:47, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100080, share access 0x7, file attributes 0x80 to open_mode 0x8040 [2004/03/17 15:37:47, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\fundscore1003.xls" [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/fundscore1003.xls] [2004/03/17 15:37:47, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [FUNDSCORE1003.XLS] -> [fundscore1003.xls] [2004/03/17 15:37:47, 3] smbd/dosmode.c:unix_mode(110) unix_mode(fundscore1003.xls) returning 0744 [2004/03/17 15:37:47, 5] smbd/files.c:file_new(122) allocated file structure 3462, fnum = 7558 (19 used) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = fundscore1003.xls, share_mode = 8040, ofun = 1, mode = 744, oplock request = 0 [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 3] lib/util.c:unix_clean_name(580) unix_clean_name [fundscore1003.xls] [2004/03/17 15:37:47, 10] locking/locking.c:get_share_modes(453) get_share_modes: share_mode_entry[0]: pid = 14792, share_mode = 0x20, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44574, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 5] smbd/open.c:open_mode_check(618) open_mode_check: oplock_request = 0, breaking oplock (3) on file fundscore1003.xls, dev = 811, inode = 5275707 [2004/03/17 15:37:47, 5] smbd/oplock.c:request_oplock_break(937) request_oplock_break: breaking our own oplock [2004/03/17 15:37:47, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275707 file_id = 44574 Current oplocks_open (exclusive = 2, levelII = 0) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,55) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,55) wrote 55 [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/03/17 15:37:47, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275707 file_id = 44574 Current oplocks_open (exclusive = 2, levelII = 0) [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199232 of length 45 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=19395 smt_wct=3 smb_vwv[ 0]= 7557 (0x1D85) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 3] smbd/reply.c:reply_close(2567) close fd=34 fnum=7557 (numopen=3) [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x20, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44574, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:47, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file fundscore1003.xls [2004/03/17 15:37:47, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file fundscore1003.xls, dev = 811, inode = 5275707 file_id = 44574 has kernel oplock state of 1. [2004/03/17 15:37:47, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:47, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=2) [2004/03/17 15:37:47, 5] smbd/files.c:file_free(385) freed files structure 7557 (18 used) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=19395 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:47, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 811, inode = 5275707 file_id = 44574 Current oplocks_open (exclusive = 1, levelII = 0) [2004/03/17 15:37:47, 3] smbd/oplock.c:initial_break_processing(543) initial_break_processing: cannot find open file with dev = 811, inode = 5275707 file_id = 44574allowing break to succeed. [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw [2004/03/17 15:37:47, 3] smbd/oplock.c:oplock_break(903) oplock_break: returning success for dev = 811, inode = 5275707, file_id = 44574 Current exclusive_oplocks_open = 1 [2004/03/17 15:37:47, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:47, 2] smbd/open.c:open_file(240) BryanW opened file fundscore1003.xls read=Yes write=No (numopen=3) [2004/03/17 15:37:47, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:47, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file fundscore1003.xls. num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x100080, port = 0x0, type= 0x0, file_id = 44575, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(122) dos_mode: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1474) is_in_path: fundscore1003.xls [2004/03/17 15:37:47, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:47, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:47, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7558, open name = fundscore1003.xls [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19332 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34304 (0x8600) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=32538 (0x7F1A) smb_vwv[ 7]=26645 (0x6815) smb_vwv[ 8]=50188 (0xC40C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=45127 (0xB047) smb_vwv[11]=26646 (0x6816) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=32538 (0x7F1A) smb_vwv[15]=26645 (0x6815) smb_vwv[16]=50188 (0xC40C) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=32538 (0x7F1A) smb_vwv[19]=26645 (0x6815) smb_vwv[20]=50188 (0xC40C) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 70 (0x46) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 84 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x54 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199234 of length 88 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19460 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=16384 (0x4000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 192 (0xC0) smb_vwv[20]= 9 (0x9) smb_vwv[21]= 7558 (0x1D86) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 39 39 .99 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw/ [2004/03/17 15:37:47, 10] smbd/nttrans.c:reply_nttrans(2451) reply_nttrans: setup_count = 8 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] C0 00 09 00 86 1D 01 00 ........ [2004/03/17 15:37:47, 10] smbd/nttrans.c:call_nt_transact_ioctl(1777) call_nt_transact_ioctl: function[0x000900C0] FID[0x1D86] isFSctl[0x01] compfilter[0x00] [2004/03/17 15:37:47, 10] smbd/nttrans.c:call_nt_transact_ioctl(1799) FSCTL_0x000900C0: called on FID[0x1D86](but not implemented) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,75) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,75) wrote 75 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 70 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x46 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199235 of length 74 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=6848 smb_uid=728 smb_mid=19524 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 00 00 F0 03 ..... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/trans2.c:call_trans2qfsinfo(1393) call_trans2qfsinfo: level = 1008 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012 [2004/03/17 15:37:47, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,124) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,124) wrote 124 [2004/03/17 15:37:47, 4] smbd/trans2.c:call_trans2qfsinfo(1676) SMBtrans2 info_level = 1008 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199236 of length 45 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=19588 smt_wct=3 smb_vwv[ 0]= 7558 (0x1D86) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/reply.c:reply_close(2567) close fd=-1 fnum=7558 (numopen=3) [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x100080, port = 0x0, type= 0x0, file_id = 44575, dev = 0x811, inode = 5275707 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:47, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:47, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file fundscore1003.xls [2004/03/17 15:37:47, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file fundscore1003.xls has no outstanding locks. [2004/03/17 15:37:47, 2] smbd/close.c:close_normal_file(228) bryanw closed file fundscore1003.xls (numopen=2) [2004/03/17 15:37:47, 5] smbd/files.c:file_free(385) freed files structure 7558 (17 used) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=19588 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 100 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x64 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199237 of length 104 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=19652 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:47, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:47, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:47, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /tmp [2004/03/17 15:37:47, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2004/03/17 15:37:47, 4] smbd/nttrans.c:nt_open_pipe(486) nt_open_pipe: Opening pipe \srvsvc. [2004/03/17 15:37:47, 3] smbd/nttrans.c:nt_open_pipe(503) nt_open_pipe: Known pipe srvsvc opening. [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/03/17 15:37:47, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/03/17 15:37:47, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 7752 (pipes_open=1) [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=7752 [2004/03/17 15:37:47, 5] smbd/nttrans.c:do_ntcreate_pipe_open(554) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=19652 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=20992 (0x5200) smb_vwv[ 3]= 375 (0x177) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 156 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x9c [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199238 of length 160 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=19716 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30546 (0x7752) smb_bcc=89 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 D0 .\.P.I.P .E.\.... [010] 2C 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ,....... .H...... [020] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ [030] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. [040] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [050] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=72 params=0 setup=2 [2004/03/17 15:37:47, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/03/17 15:37:47, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/03/17 15:37:47, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153) search for pipe pnum=7752 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) pipe name srvsvc pnum=7752 (pipes_open=1) [2004/03/17 15:37:47, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "srvsvc" (pnum 7752)api_fd_reply: p:0x836e360 max_trans_reply: 1024 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 7752 name: srvsvc open: Yes len: 72 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0b [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0048 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 11, flags = 3 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 11 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(849) api_pipe_bind_req: decode request. 849 [2004/03/17 15:37:47, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(860) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 num_elements: 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000c context_id : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 000e num_syntaxes: 01 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_uuid uuid [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 data : 4b324fc8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 data : 1670 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 data : 01d3 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 data : 12 78 5a 47 bf 6e e1 88 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 version: 00000003 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_uuid uuid [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 data : 8a885d04 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0028 data : 1ceb [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002a data : 11c9 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002c data : 9f e8 08 00 2b 10 48 60 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 version: 00000002 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(990) api_pipe_bind_req: make response. 990 [2004/03/17 15:37:47, 3] rpc_server/srv_pipe.c:check_bind_req(732) check_bind_req for \PIPE\srvsvc [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 000053f0 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 len: 000d [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000a str: \PIPE\ntsvcs. [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0018 num_results: 01 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001c result : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e reason : 0000 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_uuid uuid [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 data : 8a885d04 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0024 data : 1ceb [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0026 data : 11c9 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0028 data : 9f e8 08 00 2b 10 48 60 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 version: 00000002 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0c [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0044 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 56 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 7752 name: srvsvc len: 1024 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(970) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2004/03/17 15:37:47, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..68] [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=19716 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 \ntsvcs. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,128) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,128) wrote 128 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 176 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb0 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199239 of length 180 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=19780 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 92 (0x5C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 92 (0x5C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30546 (0x7752) smb_bcc=109 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 D0 .\.P.I.P .E.\.... [010] 2C 05 00 00 03 10 00 00 00 5C 00 00 00 01 00 00 ,....... .\...... [020] 00 44 00 00 00 00 00 10 00 24 CD 0C 05 09 00 00 .D...... .$...... [030] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 61 00 6D ........ .\.\.a.m [040] 00 61 00 6E 00 64 00 61 00 00 00 00 00 07 00 00 .a.n.d.a ........ [050] 00 00 00 00 00 07 00 00 00 42 00 72 00 79 00 61 ........ .B.r.y.a [060] 00 6E 00 57 00 00 00 00 00 01 00 00 00 .n.W.... ..... [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=92 params=0 setup=2 [2004/03/17 15:37:47, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/03/17 15:37:47, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/03/17 15:37:47, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153) search for pipe pnum=7752 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) pipe name srvsvc pnum=7752 (pipes_open=1) [2004/03/17 15:37:47, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "srvsvc" (pnum 7752)api_fd_reply: p:0x836e360 max_trans_reply: 1024 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 7752 name: srvsvc open: Yes len: 92 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 92 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 92 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 76 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 76 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 005c [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 76 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 76, incoming data = 76 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000044 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0010 [2004/03/17 15:37:47, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_pipe_request(1468) Requested \PIPE\srvsvc [2004/03/17 15:37:47, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2004/03/17 15:37:47, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528) api_rpc_cmds[7].fn == 0x80fa884 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_get_info [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr_srv_name: 050ccd24 [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 00000009 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 00000009 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.a.m.a.n.d.a... [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000022 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 uni_max_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c uni_str_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0030 buffer : B.r.y.a.n.W... [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 info_level: 00000001 [2004/03/17 15:37:47, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1391) _srv_net_share_get_info: 1391 [2004/03/17 15:37:47, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(737) init_srv_r_net_share_get_info: 737 [2004/03/17 15:37:47, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: bryanw 0 Home Directories [2004/03/17 15:37:47, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2004/03/17 15:37:47, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1397) _srv_net_share_get_info: 1397 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_get_info [2004/03/17 15:37:47, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_info info [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 switch_value : 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr_share_ctr: 00000001 [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_share_info1 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 ptr_netname: 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c type : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 ptr_remark : 00000001 [2004/03/17 15:37:47, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 srv_io_share_info1_str [2004/03/17 15:37:47, 8] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 uni_max_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c uni_str_len: 00000007 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0020 buffer : b.r.y.a.n.w... [2004/03/17 15:37:47, 8] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_unistr2 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 uni_max_len: 00000011 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 offset : 00000000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0038 uni_str_len: 00000011 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 003c buffer : H.o.m.e. .D.i.r.e.c.t.o.r.i.e.s... [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_werror(695) 0060 status: WERR_OK [2004/03/17 15:37:47, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549) api_rpcTNP: called srvsvc successfully [2004/03/17 15:37:47, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 1056 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 76 [2004/03/17 15:37:47, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 7752 name: srvsvc len: 1024 [2004/03/17 15:37:47, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 100. [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 007c [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000064 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/03/17 15:37:47, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/03/17 15:37:47, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..124] [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=6848 smb_uid=728 smb_mid=19780 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 124 (0x7C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 124 (0x7C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=125 [2004/03/17 15:37:47, 10] lib/util.c:dump_data(1830) [000] 00 05 00 02 03 10 00 00 00 7C 00 00 00 01 00 00 ........ .|...... [010] 00 64 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .d...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 07 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 62 00 72 00 79 00 61 ........ .b.r.y.a [040] 00 6E 00 77 00 00 00 00 00 11 00 00 00 00 00 00 .n.w.... ........ [050] 00 11 00 00 00 48 00 6F 00 6D 00 65 00 20 00 44 .....H.o .m.e. .D [060] 00 69 00 72 00 65 00 63 00 74 00 6F 00 72 00 69 .i.r.e.c .t.o.r.i [070] 00 65 00 73 00 00 00 00 00 00 00 00 00 .e.s.... ..... [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,184) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,184) wrote 184 [2004/03/17 15:37:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:47, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:47, 3] smbd/process.c:process_smb(890) Transaction 1199240 of length 45 [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=22 smb_pid=65279 smb_uid=728 smb_mid=19844 smt_wct=3 smb_vwv[ 0]=30546 (0x7752) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:47, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:47, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153) search for pipe pnum=7752 [2004/03/17 15:37:47, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) pipe name srvsvc pnum=7752 (pipes_open=1) [2004/03/17 15:37:47, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:7752 [2004/03/17 15:37:47, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/03/17 15:37:47, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=7752 (pipes_open=0) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:47, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=22 smb_pid=65279 smb_uid=728 smb_mid=19844 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:47, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:55, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:37:55, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:37:55, 3] smbd/process.c:process_smb(890) Transaction 1199241 of length 45 [2004/03/17 15:37:55, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:55, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=19908 smt_wct=3 smb_vwv[ 0]= 7555 (0x1D83) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:37:55, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:37:55, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10016, 10017) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:55, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1294 contains 6 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1294 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 [2004/03/17 15:37:55, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10016 Primary group is 10017 and contains 4 supplementary groups Group[ 0]: 10017 Group[ 1]: 10017 Group[ 2]: 2501 Group[ 3]: 2502 [2004/03/17 15:37:55, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10016,10016) gid=(0,10017) [2004/03/17 15:37:55, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users/bryanw/ [2004/03/17 15:37:55, 3] smbd/reply.c:reply_close(2567) close fd=36 fnum=7555 (numopen=2) [2004/03/17 15:37:55, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:37:55, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44572, dev = 0x811, inode = 14942265 [2004/03/17 15:37:55, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:37:55, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:37:55, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file WINDOWS/win.ini [2004/03/17 15:37:55, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file WINDOWS/win.ini, dev = 811, inode = 14942265 file_id = 44572 has kernel oplock state of 1. [2004/03/17 15:37:55, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file WINDOWS/win.ini has no outstanding locks. [2004/03/17 15:37:55, 2] smbd/close.c:close_normal_file(228) bryanw closed file WINDOWS/win.ini (numopen=1) [2004/03/17 15:37:55, 5] smbd/files.c:file_free(385) freed files structure 7555 (16 used) [2004/03/17 15:37:55, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:55, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=55 smb_pid=65279 smb_uid=728 smb_mid=19908 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:55, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:55, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 108 [2004/03/17 15:37:57, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x6c [2004/03/17 15:37:57, 3] smbd/process.c:process_smb(890) Transaction 1199242 of length 112 [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=108 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=48 smb_pid=6268 smb_uid=720 smb_mid=19972 smt_wct=15 smb_vwv[ 0]= 40 (0x28) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 40 (0x28) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=43 [2004/03/17 15:37:57, 10] lib/util.c:dump_data(1830) [000] 05 00 00 EC 03 00 00 00 00 5C 00 57 00 49 00 4E ........ .\.W.I.N [010] 00 44 00 4F 00 57 00 53 00 5C 00 77 00 69 00 6E .D.O.W.S .\.w.i.n [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... [2004/03/17 15:37:57, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14792) [2004/03/17 15:37:57, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10021, 10022) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:57, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1312 contains 7 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1312 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 SID[ 6]: S-1-5-21-1590455367-7305976-751859383-1229 [2004/03/17 15:37:57, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10021 Primary group is 10022 and contains 2 supplementary groups Group[ 0]: 10022 Group[ 1]: 10022 [2004/03/17 15:37:57, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10021,10021) gid=(0,10022) [2004/03/17 15:37:57, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users//tonyl [2004/03/17 15:37:57, 3] smbd/trans2.c:call_trans2qfilepathinfo(1915) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/03/17 15:37:57, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\win.ini" [2004/03/17 15:37:57, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/win.ini] [2004/03/17 15:37:57, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS/WIN.INI] -> [WINDOWS/win.ini] [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINDOWS/win.ini] [2004/03/17 15:37:57, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943) call_trans2qfilepathinfo WINDOWS/win.ini (fnum = -1) level=1004 call=5 total_data=0 [2004/03/17 15:37:57, 8] smbd/dosmode.c:dos_mode(122) dos_mode: WINDOWS/win.ini [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:57, 5] smbd/trans2.c:call_trans2qfilepathinfo(2049) SMB_QFBI - create: Mon May 12 09:12:19 2003 access: Wed Mar 17 15:28:37 2004 write: Mon May 12 09:12:19 2003 change: Mon May 12 09:12:19 2003 mode: 20 [2004/03/17 15:37:57, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/03/17 15:37:57, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(407) write_socket(15,104) [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(410) write_socket(15,104) wrote 104 [2004/03/17 15:37:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 118 [2004/03/17 15:37:57, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x76 [2004/03/17 15:37:57, 3] smbd/process.c:process_smb(890) Transaction 1199243 of length 122 [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=118 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=48 smb_pid=6268 smb_uid=720 smb_mid=20036 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8192 (0x2000) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=35 [2004/03/17 15:37:57, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 .\.W.I.N .D.O.W.S [010] 00 5C 00 77 00 69 00 6E 00 2E 00 69 00 6E 00 69 .\.w.i.n ...i.n.i [020] 00 00 00 ... [2004/03/17 15:37:57, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:57, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:57, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/03/17 15:37:57, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:57, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/03/17 15:37:57, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20089, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/03/17 15:37:57, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\win.ini" [2004/03/17 15:37:57, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/win.ini] [2004/03/17 15:37:57, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS/WIN.INI] -> [WINDOWS/win.ini] [2004/03/17 15:37:57, 3] smbd/dosmode.c:unix_mode(110) unix_mode(WINDOWS/win.ini) returning 0744 [2004/03/17 15:37:57, 5] smbd/files.c:file_new(122) allocated file structure 3463, fnum = 7559 (17 used) [2004/03/17 15:37:57, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = WINDOWS/win.ini, share_mode = 8040, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINDOWS/win.ini] [2004/03/17 15:37:57, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:57, 10] smbd/open.c:fd_open(45) fd_open: name WINDOWS/win.ini, flags = 00 mode = 0744, fd = 34. [2004/03/17 15:37:57, 2] smbd/open.c:open_file(240) TonyL opened file WINDOWS/win.ini read=Yes write=No (numopen=1) [2004/03/17 15:37:57, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 8040 [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file WINDOWS/win.ini, dev = 811, inode = 14893086, file_id = 44576 [2004/03/17 15:37:57, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file WINDOWS/win.ini, dev = 811, inode = 14893086, file_id = 44576, tv_sec = 4058c535, tv_usec = 5203f [2004/03/17 15:37:57, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file WINDOWS/win.ini. num_share_modes = 1 [2004/03/17 15:37:57, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44576, dev = 0x811, inode = 14893086 [2004/03/17 15:37:57, 8] smbd/dosmode.c:dos_mode(122) dos_mode: WINDOWS/win.ini [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/win.ini [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:57, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7559, open name = WINDOWS/win.ini [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=48 smb_pid=6268 smb_uid=720 smb_mid=20036 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34562 (0x8702) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=17675 (0x450B) smb_vwv[ 7]=39137 (0x98E1) smb_vwv[ 8]=49944 (0xC318) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=56560 (0xDCF0) smb_vwv[11]=26318 (0x66CE) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=17675 (0x450B) smb_vwv[15]=39137 (0x98E1) smb_vwv[16]=49944 (0xC318) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=17675 (0x450B) smb_vwv[19]=39137 (0x98E1) smb_vwv[20]=49944 (0xC318) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=37120 (0x9100) smb_vwv[28]= 4 (0x4) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:57, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:57, 3] smbd/process.c:process_smb(890) Transaction 1199244 of length 63 [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20100 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7559 (0x1D87) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1169 (0x491) smb_vwv[ 6]= 1169 (0x491) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 1169 (0x491) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:57, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:57, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:57, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=1169 unlocked for file WINDOWS/win.ini [2004/03/17 15:37:57, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File WINDOWS/win.ini, offset = 0, count = 1169, type = READ [2004/03/17 15:37:57, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 1169 [2004/03/17 15:37:57, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 34 12 0 1169 0 [2004/03/17 15:37:57, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 34 12 0 1169 0 [2004/03/17 15:37:57, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:57, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=1169 unlocked for file WINDOWS/win.ini [2004/03/17 15:37:57, 10] smbd/fileio.c:read_file(101) read_file (WINDOWS/win.ini): pos = 0, size = 1169, returned 1169 [2004/03/17 15:37:57, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7559 max=1169 nread=1169 [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=1228 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20100 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1169 (0x491) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=1169 [2004/03/17 15:37:57, 10] lib/util.c:dump_data(1830) [000] 3B 20 66 6F 72 20 31 36 2D 62 69 74 20 61 70 70 ; for 16 -bit app [010] 20 73 75 70 70 6F 72 74 0D 0A 5B 66 6F 6E 74 73 support ..[fonts [020] 5D 0D 0A 5B 65 78 74 65 6E 73 69 6F 6E 73 5D 0D ]..[exte nsions]. [030] 0A 5B 6D 63 69 20 65 78 74 65 6E 73 69 6F 6E 73 .[mci ex tensions [040] 5D 0D 0A 5B 66 69 6C 65 73 5D 0D 0A 5B 4D 61 69 ]..[file s]..[Mai [050] 6C 5D 0D 0A 4D 41 50 49 3D 31 0D 0A 43 4D 43 3D l]..MAPI =1..CMC= [060] 31 0D 0A 43 4D 43 44 4C 4C 4E 41 4D 45 33 32 3D 1..CMCDL LNAME32= [070] 6D 61 70 69 33 32 2E 64 6C 6C 0D 0A 43 4D 43 44 mapi32.d ll..CMCD [080] 4C 4C 4E 41 4D 45 3D 6D 61 70 69 2E 64 6C 6C 0D LLNAME=m api.dll. [090] 0A 4D 41 50 49 58 3D 31 0D 0A 4D 41 50 49 58 56 .MAPIX=1 ..MAPIXV [0A0] 45 52 3D 31 2E 30 2E 30 2E 31 0D 0A 4F 4C 45 4D ER=1.0.0 .1..OLEM [0B0] 65 73 73 61 67 69 6E 67 3D 31 0D 0A 5B 4D 43 49 essaging =1..[MCI [0C0] 20 45 78 74 65 6E 73 69 6F 6E 73 2E 42 41 4B 5D Extensi ons.BAK] [0D0] 0D 0A 61 73 66 3D 4D 50 45 47 56 69 64 65 6F 0D ..asf=MP EGVideo. [0E0] 0A 61 73 78 3D 4D 50 45 47 56 69 64 65 6F 0D 0A .asx=MPE GVideo.. [0F0] 69 76 66 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D ivf=MPEG Video..m [100] 33 75 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 3u=MPEGV ideo..mp [110] 32 76 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 2v=MPEGV ideo..mp [120] 33 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 6D 70 76 3=MPEGVi deo..mpv [130] 32 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 77 61 78 2=MPEGVi deo..wax [140] 3D 4D 50 45 47 56 69 64 65 6F 0D 0A 77 6D 3D 4D =MPEGVid eo..wm=M [150] 50 45 47 56 69 64 65 6F 0D 0A 77 6D 61 3D 4D 50 PEGVideo ..wma=MP [160] 45 47 56 69 64 65 6F 0D 0A 77 6D 76 3D 4D 50 45 EGVideo. .wmv=MPE [170] 47 56 69 64 65 6F 0D 0A 77 76 78 3D 4D 50 45 47 GVideo.. wvx=MPEG [180] 56 69 64 65 6F 0D 0A 5B 57 69 6E 5A 69 70 5D 0D Video..[ WinZip]. [190] 0A 4E 6F 74 65 2D 31 3D 54 68 69 73 20 73 65 63 .Note-1= This sec [1A0] 74 69 6F 6E 20 69 73 20 72 65 71 75 69 72 65 64 tion is required [1B0] 20 6F 6E 6C 79 20 74 6F 20 69 6E 73 74 61 6C 6C only to install [1C0] 20 74 68 65 20 6F 70 74 69 6F 6E 61 6C 20 57 69 the opt ional Wi [1D0] 6E 5A 69 70 20 49 6E 74 65 72 6E 65 74 20 42 72 nZip Int ernet Br [1E0] 6F 77 73 65 72 20 53 75 70 70 6F 72 74 20 62 75 owser Su pport bu [1F0] 69 6C 64 20 30 32 33 31 2E 0D 0A 4E 6F 74 65 2D ild 0231 ...Note- [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(407) write_socket(15,1232) [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(410) write_socket(15,1232) wrote 1232 [2004/03/17 15:37:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 126 [2004/03/17 15:37:57, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7e [2004/03/17 15:37:57, 3] smbd/process.c:process_smb(890) Transaction 1199245 of length 130 [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=48 smb_pid=6268 smb_uid=720 smb_mid=20164 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2004/03/17 15:37:57, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 .\.W.I.N .D.O.W.S [010] 00 5C 00 69 00 6E 00 69 00 66 00 69 00 6C 00 65 .\.i.n.i .f.i.l.e [020] 00 2E 00 75 00 70 00 64 00 00 00 ...u.p.d ... [2004/03/17 15:37:57, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:57, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:57, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2004/03/17 15:37:57, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/03/17 15:37:57, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x0 to open_mode 0x40 [2004/03/17 15:37:57, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\inifile.upd" [2004/03/17 15:37:57, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/inifile.upd] [2004/03/17 15:37:57, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS/INIFILE.UPD] -> [WINDOWS/inifile.upd] [2004/03/17 15:37:57, 3] smbd/dosmode.c:unix_mode(110) unix_mode(WINDOWS/inifile.upd) returning 0744 [2004/03/17 15:37:57, 5] smbd/files.c:file_new(122) allocated file structure 3464, fnum = 7560 (18 used) [2004/03/17 15:37:57, 10] smbd/open.c:open_file_shared1(838) open_file_shared: fname = WINDOWS/inifile.upd, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/inifile.upd [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINDOWS/inifile.upd] [2004/03/17 15:37:57, 4] smbd/open.c:open_file_shared1(1004) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2004/03/17 15:37:57, 10] smbd/open.c:fd_open(45) fd_open: name WINDOWS/inifile.upd, flags = 00 mode = 0744, fd = 36. [2004/03/17 15:37:57, 2] smbd/open.c:open_file(240) TonyL opened file WINDOWS/inifile.upd read=Yes write=No (numopen=2) [2004/03/17 15:37:57, 10] smbd/open.c:open_file_shared1(1116) open_file_shared : share_mode = 40 [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/inifile.upd [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file WINDOWS/inifile.upd, dev = 811, inode = 14893088, file_id = 44577 [2004/03/17 15:37:57, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file WINDOWS/inifile.upd, dev = 811, inode = 14893088, file_id = 44577, tv_sec = 4058c535, tv_usec = 53f48 [2004/03/17 15:37:57, 10] locking/locking.c:set_share_mode(659) set_share_mode: creating entry for file WINDOWS/inifile.upd. num_share_modes = 1 [2004/03/17 15:37:57, 10] locking/locking.c:print_share_mode_table(409) print_share_mode_table: share_mode_entry[0]: pid = 14792, share_mode = 0x40, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44577, dev = 0x811, inode = 14893088 [2004/03/17 15:37:57, 8] smbd/dosmode.c:dos_mode(122) dos_mode: WINDOWS/inifile.upd [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1474) is_in_path: WINDOWS/inifile.upd [2004/03/17 15:37:57, 8] lib/util.c:is_in_path(1478) is_in_path: no name list. [2004/03/17 15:37:57, 8] smbd/dosmode.c:dos_mode(170) dos_mode returning a [2004/03/17 15:37:57, 5] smbd/nttrans.c:reply_ntcreate_and_X(969) reply_ntcreate_and_X: fnum = 7560, open name = WINDOWS/inifile.upd [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=48 smb_pid=6268 smb_uid=720 smb_mid=20164 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34818 (0x8802) smb_vwv[ 3]= 285 (0x11D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=35319 (0x89F7) smb_vwv[ 7]= 7768 (0x1E58) smb_vwv[ 8]=50159 (0xC3EF) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=56560 (0xDCF0) smb_vwv[11]=26318 (0x66CE) smb_vwv[12]=50188 (0xC40C) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=35319 (0x89F7) smb_vwv[15]= 7768 (0x1E58) smb_vwv[16]=50159 (0xC3EF) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=35319 (0x89F7) smb_vwv[19]= 7768 (0x1E58) smb_vwv[20]=50159 (0xC3EF) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=12800 (0x3200) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(407) write_socket(15,107) [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(410) write_socket(15,107) wrote 107 [2004/03/17 15:37:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 59 [2004/03/17 15:37:57, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/03/17 15:37:57, 3] smbd/process.c:process_smb(890) Transaction 1199246 of length 63 [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20228 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7560 (0x1D88) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 50 (0x32) smb_vwv[ 6]= 50 (0x32) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 50 (0x32) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/03/17 15:37:57, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 14792) [2004/03/17 15:37:57, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:57, 10] locking/locking.c:is_locked(78) is_locked: brl start=0 len=50 unlocked for file WINDOWS/inifile.upd [2004/03/17 15:37:57, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File WINDOWS/inifile.upd, offset = 0, count = 50, type = READ [2004/03/17 15:37:57, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 50 [2004/03/17 15:37:57, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 36 12 0 50 0 [2004/03/17 15:37:57, 8] lib/util.c:fcntl_lock(1622) fcntl_lock 36 12 0 50 0 [2004/03/17 15:37:57, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2004/03/17 15:37:57, 10] locking/locking.c:is_locked(90) is_locked: posix start=0 len=50 unlocked for file WINDOWS/inifile.upd [2004/03/17 15:37:57, 10] smbd/fileio.c:read_file(101) read_file (WINDOWS/inifile.upd): pos = 0, size = 50, returned 50 [2004/03/17 15:37:57, 3] smbd/reply.c:send_file_readX(1949) send_file_readX fnum=7560 max=50 nread=50 [2004/03/17 15:37:57, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:57, 5] lib/util.c:show_msg(466) size=109 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20228 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 50 (0x32) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=50 [2004/03/17 15:37:57, 10] lib/util.c:dump_data(1830) [000] 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 \.?.?.\. C.:.\.W. [010] 49 00 4E 00 4E 00 54 00 5C 00 77 00 69 00 6E 00 I.N.N.T. \.w.i.n. [020] 2E 00 69 00 6E 00 69 00 00 00 4E AF C0 FD A4 ED ..i.n.i. ..N..... [030] C3 01 .. [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(407) write_socket(15,113) [2004/03/17 15:37:57, 6] lib/util_sock.c:write_socket(410) write_socket(15,113) wrote 113 [2004/03/17 15:37:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 102 [2004/03/17 15:37:58, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x66 [2004/03/17 15:37:58, 3] smbd/process.c:process_smb(890) Transaction 1199247 of length 106 [2004/03/17 15:37:58, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:58, 5] lib/util.c:show_msg(466) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=40 smb_pid=2128 smb_uid=725 smb_mid=20292 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 512 (0x200) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2004/03/17 15:37:58, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 .\.W.I.N .D.O.W.S [010] 00 00 00 ... [2004/03/17 15:37:58, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10034, 10035) - sec_ctx_stack_ndx = 0 [2004/03/17 15:37:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1342 contains 8 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1342 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 SID[ 6]: S-1-5-21-1590455367-7305976-751859383-1067 SID[ 7]: S-1-5-21-1590455367-7305976-751859383-1229 [2004/03/17 15:37:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10034 Primary group is 10035 and contains 2 supplementary groups Group[ 0]: 10035 Group[ 1]: 10035 [2004/03/17 15:37:58, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10034,10034) gid=(0,10035) [2004/03/17 15:37:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users//jennifers [2004/03/17 15:37:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x100001 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x2 create_options = 0x1 root_dir_fid = 0x0 [2004/03/17 15:37:58, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x2 to 0x10 [2004/03/17 15:37:58, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100001, share access 0x3, file attributes 0x80 to open_mode 0x40 [2004/03/17 15:37:58, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS" [2004/03/17 15:37:58, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS] [2004/03/17 15:37:58, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS] -> [WINDOWS] [2004/03/17 15:37:58, 3] smbd/dosmode.c:unix_mode(110) unix_mode(WINDOWS) returning 0744 [2004/03/17 15:37:58, 5] smbd/files.c:file_new(122) allocated file structure 3465, fnum = 7561 (19 used) [2004/03/17 15:37:58, 5] smbd/files.c:file_free(385) freed files structure 7561 (18 used) [2004/03/17 15:37:58, 10] smbd/trans2.c:set_bad_path_error(1802) set_bad_path_error: err = 17 bad_path = 0 [2004/03/17 15:37:58, 3] smbd/error.c:error_packet(94) error string = File exists [2004/03/17 15:37:58, 3] smbd/error.c:error_packet(118) error packet at smbd/trans2.c(1811) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_COLLISION [2004/03/17 15:37:58, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:58, 5] lib/util.c:show_msg(466) size=35 smb_com=0xa2 smb_rcls=53 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=40 smb_pid=2128 smb_uid=725 smb_mid=20292 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:58, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:58, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:37:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2004/03/17 15:37:58, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2004/03/17 15:37:58, 3] smbd/process.c:process_smb(890) Transaction 1199248 of length 120 [2004/03/17 15:37:58, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:58, 5] lib/util.c:show_msg(466) size=116 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=40 smb_pid=2128 smb_uid=725 smb_mid=20356 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7680 (0x1E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 512 (0x200) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=33 [2004/03/17 15:37:58, 10] lib/util.c:dump_data(1830) [000] 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 .\.W.I.N .D.O.W.S [010] 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 00 .\.s.y.s .t.e.m.. [020] 00 . [2004/03/17 15:37:58, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 14792) [2004/03/17 15:37:58, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:37:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(601) reply_ntcreateX: flags = 0x10, desired_access = 0x100001 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x2 create_options = 0x1 root_dir_fid = 0x0 [2004/03/17 15:37:58, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x2 to 0x10 [2004/03/17 15:37:58, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100001, share access 0x3, file attributes 0x80 to open_mode 0x40 [2004/03/17 15:37:58, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINDOWS\system" [2004/03/17 15:37:58, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINDOWS/system] [2004/03/17 15:37:58, 10] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [WINDOWS/SYSTEM] [2004/03/17 15:37:58, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [WINDOWS] -> [WINDOWS] [2004/03/17 15:37:58, 5] smbd/statcache.c:stat_cache_add(178) stat_cache_add: Added entry WINDOWS/SYSTEM -> WINDOWS/system [2004/03/17 15:37:58, 5] smbd/filename.c:unix_convert(183) conversion finished WINDOWS/system -> WINDOWS/system [2004/03/17 15:37:58, 3] smbd/dosmode.c:unix_mode(110) unix_mode(WINDOWS/system) returning 0744 [2004/03/17 15:37:58, 5] smbd/files.c:file_new(122) allocated file structure 3466, fnum = 7562 (19 used) [2004/03/17 15:37:58, 5] smbd/files.c:file_free(385) freed files structure 7562 (18 used) [2004/03/17 15:37:58, 10] smbd/trans2.c:set_bad_path_error(1802) set_bad_path_error: err = 17 bad_path = 0 [2004/03/17 15:37:58, 3] smbd/error.c:error_packet(94) error string = File exists [2004/03/17 15:37:58, 3] smbd/error.c:error_packet(118) error packet at smbd/trans2.c(1811) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_COLLISION [2004/03/17 15:37:58, 5] lib/util.c:show_msg(456) [2004/03/17 15:37:58, 5] lib/util.c:show_msg(466) size=35 smb_com=0xa2 smb_rcls=53 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=40 smb_pid=2128 smb_uid=725 smb_mid=20356 smt_wct=0 smb_bcc=0 [2004/03/17 15:37:58, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:37:58, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:38:00, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,eth0) -> -1 [2004/03/17 15:38:00, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,lo) -> -1 [2004/03/17 15:38:00, 2] lib/interface.c:add_interface(79) added interface ip=10.200.200.2 bcast=10.200.200.255 nmask=255.255.255.0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 16384 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 16384 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2004/03/17 15:38:00, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2004/03/17 15:38:00, 5] lib/hash.c:hash_table_init(67) Hash size = 521. [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service homes [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service Office2000 [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service Apps [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service ACEEE [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service HERS_DIR [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service Databases [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service share [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service digi-cam [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service IPC$ [2004/03/17 15:38:00, 5] param/loadparm.c:free_service(2165) free_service: Freeing service ADMIN$ [2004/03/17 15:38:00, 3] param/loadparm.c:lp_load(3810) lp_load: refreshing parameters [2004/03/17 15:38:00, 3] param/loadparm.c:init_globals(1300) Initialising global parameters [2004/03/17 15:38:00, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2004/03/17 15:38:00, 3] param/loadparm.c:do_section(3322) Processing section "[global]" doing parameter workgroup = WECC-DOMAIN doing parameter server string = Amanda Samba Server [%v] doing parameter bind interfaces only = true doing parameter netbios name = amanda [2004/03/17 15:38:00, 4] param/loadparm.c:handle_netbios_name(2700) handle_netbios_name: set global_myname to: AMANDA doing parameter nt acl support = yes doing parameter hosts allow = ALL doing parameter printcap name = /etc/printcap doing parameter printing = bsd doing parameter log file = /var/log/samba.log doing parameter max log size = 1000 doing parameter security = domain doing parameter password server = * doing parameter encrypt passwords = yes doing parameter smb passwd file = /etc/samba/smbpasswd doing parameter unix password sync = Yes doing parameter passwd program = /usr/bin/passwd %u doing parameter passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 doing parameter interfaces = 10.200.200.2 doing parameter wins server = 10.200.200.1 doing parameter dns proxy = no [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[homes]" doing parameter comment = Home Directories doing parameter browseable = no doing parameter writable = yes [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[Office2000]" doing parameter comment = Office2000 doing parameter path = /u1/Office2000 doing parameter public = yes doing parameter read only = no doing parameter create mask = 0775 doing parameter directory mask = 0775 doing parameter force create mode = 0775 doing parameter force directory mode = 0775 doing parameter force user = root doing parameter force group = users [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[Apps]" doing parameter comment = Old apps (H: Drive) doing parameter path = /u1/Apps doing parameter public = yes doing parameter read only = no [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[ACEEE]" doing parameter comment = ACEEE PDF doing parameter path = /u1/ACEEE doing parameter public = yes doing parameter read-only = yes [2004/03/17 15:38:00, 0] param/loadparm.c:map_parameter(2410) Unknown parameter encountered: "read-only" [2004/03/17 15:38:00, 0] param/loadparm.c:lp_do_parameter(3048) Ignoring unknown parameter "read-only" doing parameter create mask = 0775 doing parameter force create mode = 0775 doing parameter directory mask = 0775 doing parameter force directory mode = 0775 doing parameter force user = root doing parameter force group = users [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[HERS_DIR]" doing parameter comment = HERS Directory doing parameter path = /u1/HERS_DIR doing parameter public = yes doing parameter read only = no doing parameter create mask = 0775 doing parameter force create mode = 0775 doing parameter directory mask = 0775 doing parameter force directory mode = 0775 doing parameter force user = root doing parameter force group = users [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[Databases]" doing parameter comment = Databases doing parameter path = /u1/Databases doing parameter public = yes doing parameter read only = no doing parameter create mask = 0775 doing parameter force create mode = 0775 doing parameter directory mask = 0775 doing parameter force directory mode = 0775 doing parameter force user = root doing parameter force group = users [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[share]" doing parameter comment = Share doing parameter path = /u1/share doing parameter public = yes doing parameter read only = no doing parameter create mask = 0775 doing parameter force create mode = 0775 doing parameter directory mask = 0775 doing parameter force directory mode = 0775 doing parameter force user = root doing parameter force group = users [2004/03/17 15:38:00, 2] param/loadparm.c:do_section(3339) Processing section "[digi-cam]" doing parameter comment = Digital Camera Files doing parameter path = /u1/digital doing parameter public = yes doing parameter read only = no doing parameter create mask = 0775 doing parameter force create mode = 0775 doing parameter directory mask = 0775 doing parameter force directory mode = 0775 doing parameter force user = root doing parameter force group = users [2004/03/17 15:38:00, 4] param/loadparm.c:lp_load(3842) pm_process() returned Yes [2004/03/17 15:38:00, 3] param/loadparm.c:lp_add_ipc(2349) adding IPC service [2004/03/17 15:38:00, 3] param/loadparm.c:lp_add_ipc(2349) adding IPC service [2004/03/17 15:38:00, 10] param/loadparm.c:set_server_role(3760) set_server_role: role = ROLE_DOMAIN_MEMBER [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 5] lib/charcnv.c:charset_name(74) Substituting charset 'ANSI_X3.4-1968' for LOCALE [2004/03/17 15:38:00, 7] param/loadparm.c:lp_servicenumber(3952) lp_servicenumber: couldn't find printers [2004/03/17 15:38:00, 7] param/loadparm.c:lp_servicenumber(3952) lp_servicenumber: couldn't find printers [2004/03/17 15:38:00, 6] param/loadparm.c:lp_file_list_changed(2653) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Mar 17 15:37:57 2004 [2004/03/17 15:38:00, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,eth0) -> -1 [2004/03/17 15:38:00, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,lo) -> -1 [2004/03/17 15:38:00, 2] lib/interface.c:add_interface(79) added interface ip=10.200.200.2 bcast=10.200.200.255 nmask=255.255.255.0 [2004/03/17 15:38:00, 5] lib/hash.c:hash_table_init(67) Hash size = 521. [2004/03/17 15:38:02, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,eth0) -> -1 [2004/03/17 15:38:02, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,lo) -> -1 [2004/03/17 15:38:02, 2] lib/interface.c:add_interface(79) added interface ip=10.200.200.2 bcast=10.200.200.255 nmask=255.255.255.0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2004/03/17 15:38:02, 5] lib/hash.c:hash_table_init(67) Hash size = 521. [2004/03/17 15:38:02, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,eth0) -> -1 [2004/03/17 15:38:02, 10] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(10.200.200.2,lo) -> -1 [2004/03/17 15:38:02, 2] lib/interface.c:add_interface(79) added interface ip=10.200.200.2 bcast=10.200.200.255 nmask=255.255.255.0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 16384 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2004/03/17 15:38:02, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2004/03/17 15:38:02, 5] lib/hash.c:hash_table_init(67) Hash size = 521. [2004/03/17 15:38:07, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:38:07, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:38:07, 3] smbd/process.c:process_smb(890) Transaction 1199249 of length 45 [2004/03/17 15:38:07, 5] lib/util.c:show_msg(456) [2004/03/17 15:38:07, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20420 smt_wct=3 smb_vwv[ 0]= 7559 (0x1D87) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:38:07, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:38:07, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10021, 10022) - sec_ctx_stack_ndx = 0 [2004/03/17 15:38:07, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1590455367-7305976-751859383-1312 contains 7 SIDs SID[ 0]: S-1-5-21-1590455367-7305976-751859383-1312 SID[ 1]: S-1-5-21-1590455367-7305976-751859383-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1590455367-7305976-751859383-1027 SID[ 6]: S-1-5-21-1590455367-7305976-751859383-1229 [2004/03/17 15:38:07, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 10021 Primary group is 10022 and contains 2 supplementary groups Group[ 0]: 10022 Group[ 1]: 10022 [2004/03/17 15:38:07, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(10021,10021) gid=(0,10022) [2004/03/17 15:38:07, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /u1/users//tonyl [2004/03/17 15:38:07, 3] smbd/reply.c:reply_close(2567) close fd=34 fnum=7559 (numopen=2) [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x8040, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44576, dev = 0x811, inode = 14893086 [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:38:07, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file WINDOWS/win.ini [2004/03/17 15:38:07, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file WINDOWS/win.ini, dev = 811, inode = 14893086 file_id = 44576 has kernel oplock state of 1. [2004/03/17 15:38:07, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file WINDOWS/win.ini has no outstanding locks. [2004/03/17 15:38:07, 2] smbd/close.c:close_normal_file(228) tonyl closed file WINDOWS/win.ini (numopen=1) [2004/03/17 15:38:07, 5] smbd/files.c:file_free(385) freed files structure 7559 (17 used) [2004/03/17 15:38:07, 5] lib/util.c:show_msg(456) [2004/03/17 15:38:07, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20420 smt_wct=0 smb_bcc=0 [2004/03/17 15:38:07, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:38:07, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39 [2004/03/17 15:38:07, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2004/03/17 15:38:07, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/03/17 15:38:07, 3] smbd/process.c:process_smb(890) Transaction 1199250 of length 45 [2004/03/17 15:38:07, 5] lib/util.c:show_msg(456) [2004/03/17 15:38:07, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20484 smt_wct=3 smb_vwv[ 0]= 7560 (0x1D88) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/03/17 15:38:07, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 14792) [2004/03/17 15:38:07, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2004/03/17 15:38:07, 3] smbd/reply.c:reply_close(2567) close fd=36 fnum=7560 (numopen=1) [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(569) del_share_entry: num_share_modes = 1 [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(574) del_share_entry: deleted share_mode_entry[0]: pid = 14792, share_mode = 0x40, desired_access = 0x20089, port = 0x81ac, type= 0x3, file_id = 44577, dev = 0x811, inode = 14893088 [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(582) del_share_entry: deleting entry 0 [2004/03/17 15:38:07, 10] locking/locking.c:del_share_entry(604) del_share_entry: Remaining table. [2004/03/17 15:38:07, 10] smbd/close.c:close_normal_file(167) close_normal_file: share_entry_count = 0 for file WINDOWS/inifile.upd [2004/03/17 15:38:07, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file WINDOWS/inifile.upd, dev = 811, inode = 14893088 file_id = 44577 has kernel oplock state of 1. [2004/03/17 15:38:07, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file WINDOWS/inifile.upd has no outstanding locks. [2004/03/17 15:38:07, 2] smbd/close.c:close_normal_file(228) tonyl closed file WINDOWS/inifile.upd (numopen=0) [2004/03/17 15:38:07, 5] smbd/files.c:file_free(385) freed files structure 7560 (16 used) [2004/03/17 15:38:07, 5] lib/util.c:show_msg(456) [2004/03/17 15:38:07, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=48 smb_pid=65279 smb_uid=720 smb_mid=20484 smt_wct=0 smb_bcc=0 [2004/03/17 15:38:07, 6] lib/util_sock.c:write_socket(407) write_socket(15,39) [2004/03/17 15:38:07, 6] lib/util_sock.c:write_socket(410) write_socket(15,39) wrote 39