Attachment 4938 Details for Bug 6883 – log level 10 of a client experiencing symptom described

log level 10 of a client experiencing symptom described

log.saintly.level10 (text/plain), 959.84 KB, created by Justin Brinegar on 2009-11-10 09:12:40 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Justin Brinegar

Created: 2009-11-10 09:12:40 UTC

Size: 959.84 KB

patch

obsolete

>[2009/11/10 09:57:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2150 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36164
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4974 (0x136E)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-114069156-2663528578-1345302127-280518
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-114069156-2663528578-1345302127-280518
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-123
>  SID[  6]: S-1-22-1-139759
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/11/10 09:57:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 139759
>  Primary group is 1001 and contains 2 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 123
>[2009/11/10 09:57:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,139759) gid=(0,1001)
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000457F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d80
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/UNIRES.DLL, offset = 0, count = 4096, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 0, count_out = 4096
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 93 0 4096 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=93 offset=0 count=4096 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 93 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=0 len=4096 unlocked for fnum 4974 file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000457F
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 4974 file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/UNIRES.DLL): pos = 0, size = 4096, returned 4096
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4974 max=4096 nread=4096
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2151 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36228
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4974 (0x136E)
>  smb_vwv[ 3]=  512 (0x200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/UNIRES.DLL, offset = 512, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 512, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 93 512 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=93 offset=512 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 93 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=512 len=16384 unlocked for fnum 4974 file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=512 len=16384 unlocked for fnum 4974 file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/UNIRES.DLL): pos = 512, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4974 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 146
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x92
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2152 of length 150 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=146
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36292
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=15360 (0x3C00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=63
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 2D 00 55 00 53 00 5C   .3.\.e.n .-.U.S.\
>  [0020] 00 55 00 4E 00 49 00 52   00 45 00 53 00 2E 00 44   .U.N.I.R .E.S...D
>  [0030] 00 4C 00 4C 00 2E 00 6D   00 75 00 69 00 00 00     .L.L...m .u.i...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en-US/UNIRES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en-US/UNIRES.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en-US/UNIRES.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US/UNIRES.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en-US/UNIRES.DLL.mui, dirpath = W32X86/3, start = en-US/UNIRES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US/UNIRES.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US/UNIRES.DLL.mui (len 5) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component UNIRES.DLL.mui (len 14) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US (len 5) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en-US
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en-US/UNIRES.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36292
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 140
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x8c
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2153 of length 144 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=140
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36356
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13824 (0x3600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 5C 00 55 00 4E 00 49   .3.\.e.n .\.U.N.I
>  [0020] 00 52 00 45 00 53 00 2E   00 44 00 4C 00 4C 00 2E   .R.E.S.. .D.L.L..
>  [0030] 00 6D 00 75 00 69 00 00   00                       .m.u.i.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en/UNIRES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en/UNIRES.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en/UNIRES.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN/UNIRES.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en/UNIRES.DLL.mui, dirpath = W32X86/3, start = en/UNIRES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en/UNIRES.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en/UNIRES.DLL.mui (len 2) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component UNIRES.DLL.mui (len 14) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en (len 2) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en/UNIRES.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36356
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2154 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36420
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4974 (0x136E)
>  smb_vwv[ 3]=  512 (0x200)
>  smb_vwv[ 4]=    2 (0x2)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/UNIRES.DLL, offset = 131584, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 131584, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 93 131584 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=93 offset=131584 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 93 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=131584 len=16384 unlocked for fnum 4974 file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=131584 len=16384 unlocked for fnum 4974 file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/UNIRES.DLL): pos = 131584, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4974 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 124
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7c
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2155 of length 128 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=124
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36484
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 9728 (0x2600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=41
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 3C 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   <\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 50 00 43   00 4C 00 58 00 4C 00 2E   .3.\.P.C .L.X.L..
>  [0020] 00 44 00 4C 00 4C 00 00   00                       .D.L.L.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCLXL.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCLXL.DLL] -> [W32X86/3/PCLXL.DLL]
>[2009/11/10 09:57:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 879, fnum = 4975 (69 used)
>[2009/11/10 09:57:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(W32X86/3/PCLXL.DLL) returning 0775
>[2009/11/10 09:57:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCLXL.DLL, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0775 oplock_request=3
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCLXL.DLL, after mapping access_mask=0x20089
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667f50
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] smbd/open.c:846(send_break_message)
>  Sending break request to PID 12289
>[2009/11/10 09:57:04, 10] lib/messages_local.c:237(messaging_tdb_store)
>  messaging_tdb_store:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       array: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_REQUEST (774)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 84 8E 03 00   89 00 02 00 01 00 00 00   .0...... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   BE 44 04 00 03 03 00 00   D...?.ùJ ¾D......
>  [0020] 00 00 00 00 5E 7F 00 00   00 00 00 00 00 00 00 00   ....^... ........
>  [0030] 00 00 00 00 62 01 00 00   EF 21 02 00 00 00 FF FF   ....b... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] smbd/open.c:1029(defer_open)
>  defer_open_sharing_error: time [1257865024.114558] adding deferred open entry for mid 36484
>[2009/11/10 09:57:04, 10] smbd/process.c:638(push_deferred_smb_message)
>  push_deferred_open_smb_message: pushing message len 128 mid 36484 timeout time [1257865084.114558]
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "smbd_deferred_open_timer": 0xa5ad8a8
>[2009/11/10 09:57:04, 10] smbd/process.c:501(push_queued_message)
>  push_message: pushed message length 128 on deferred_open_queue
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x8e84, type= 0x3, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x8e84, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4975 (68 used)
>[2009/11/10 09:57:04, 10] smbd/open.c:3218(create_file_unixpath)
>  create_file_unixpath: NT_STATUS_SHARING_VIOLATION
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_SHARING_VIOLATION
>[2009/11/10 09:57:04, 10] lib/messages_local.c:73(messaging_tdb_signal_handler)
>  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
>[2009/11/10 09:57:04, 10] lib/messages_local.c:447(message_dispatch)
>  message_dispatch: received_messages = 1
>[2009/11/10 09:57:04, 10] lib/messages_local.c:196(messaging_tdb_fetch)
>  messaging_tdb_fetch:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       result: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_REQUEST (774)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 84 8E 03 00   89 00 02 00 01 00 00 00   .0...... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   BE 44 04 00 03 03 00 00   D...?.ùJ ¾D......
>  [0020] 00 00 00 00 5E 7F 00 00   00 00 00 00 00 00 00 00   ....^... ........
>  [0030] 00 00 00 00 62 01 00 00   EF 21 02 00 00 00 FF FF   ....b... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] smbd/oplock.c:486(process_oplock_break_message)
>  Got oplock break message from pid 12289: 303:7f5e:0/354
>[2009/11/10 09:57:04,  3] smbd/oplock.c:260(initial_break_processing)
>  initial_break_processing: called for 303:7f5e:0/354
>  Current oplocks_open (exclusive = 19, levelII = 0)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=51
>  smb_com=0x24
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=0
>  smb_tid=34
>  smb_pid=65535
>  smb_uid=0
>  smb_mid=65535
>  smt_wct=8
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 5084 (0x13DC)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "oplock_timeout_handler": 0xa58a2e8
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 51
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x33
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2156 of length 55 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=51
>  smb_com=0x24
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=65535
>  smt_wct=8
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5084 (0x13DC)
>  smb_vwv[ 3]=   19 (0x13)
>  smb_vwv[ 4]=65535 (0xFFFF)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBlockingX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  5] smbd/reply.c:6958(reply_lockingX)
>  reply_lockingX: oplock break reply (0) from client for fnum = 5084
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d30
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x8e84, type= 0x3, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x8e84, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/PCLXL.DLL, file_id = 303:7f5e:0 gen_id = 354 has kernel oplock state of 1.
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Destroying timer event 0xa58a2e8 "oplock_timeout_handler"
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x8e84, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/messages_local.c:237(messaging_tdb_store)
>  messaging_tdb_store:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       array: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_RESPONSE (775)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 84 8E 03 00   89 00 02 00 01 00 00 00   .0...... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   BE 44 04 00 03 03 00 00   D...?.ùJ ¾D......
>  [0020] 00 00 00 00 5E 7F 00 00   00 00 00 00 00 00 00 00   ....^... ........
>  [0030] 00 00 00 00 62 01 00 00   EF 21 02 00 00 00 FF FF   ....b... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] lib/messages_local.c:73(messaging_tdb_signal_handler)
>  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
>[2009/11/10 09:57:04, 10] lib/messages_local.c:447(message_dispatch)
>  message_dispatch: received_messages = 1
>[2009/11/10 09:57:04, 10] lib/messages_local.c:196(messaging_tdb_fetch)
>  messaging_tdb_fetch:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       result: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_RESPONSE (775)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 84 8E 03 00   89 00 02 00 01 00 00 00   .0...... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   BE 44 04 00 03 03 00 00   D...?.ùJ ¾D......
>  [0020] 00 00 00 00 5E 7F 00 00   00 00 00 00 00 00 00 00   ....^... ........
>  [0030] 00 00 00 00 62 01 00 00   EF 21 02 00 00 00 FF FF   ....b... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] smbd/oplock.c:703(process_oplock_break_response)
>  Got oplock break response from pid 12289: 303:7f5e:0/354 mid 36484
>[2009/11/10 09:57:04, 10] smbd/process.c:541(schedule_deferred_open_smb_message)
>  schedule_deferred_open_smb_message: [0] msg_mid = 36484
>[2009/11/10 09:57:04, 10] smbd/process.c:556(schedule_deferred_open_smb_message)
>  schedule_deferred_open_smb_message: scheduling mid 36484
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "smbd_deferred_open_timer": 0xa5d48e0
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Destroying timer event 0xa5ad8a8 "smbd_deferred_open_timer"
>[2009/11/10 09:57:04, 10] lib/events.c:105(run_events)
>  Running timed event "smbd_deferred_open_timer" 0xa5d48e0
>[2009/11/10 09:57:04,  5] smbd/process.c:428(smbd_deferred_open_timer)
>  smbd_deferred_open_timer: trigger mid 36484.
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7c
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2157 of length 128 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=124
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36484
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 9728 (0x2600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=41
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 3C 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   <\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 50 00 43   00 4C 00 58 00 4C 00 2E   .3.\.P.C .L.X.L..
>  [0020] 00 44 00 4C 00 4C 00 00   00                       .D.L.L.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCLXL.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCLXL.DLL] -> [W32X86/3/PCLXL.DLL]
>[2009/11/10 09:57:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 880, fnum = 4976 (69 used)
>[2009/11/10 09:57:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(W32X86/3/PCLXL.DLL) returning 0775
>[2009/11/10 09:57:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCLXL.DLL, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0775 oplock_request=3
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667f50
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x8e84, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x8e84, type= 0x40, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] smbd/process.c:519(remove_deferred_open_smb_message)
>  remove_deferred_open_smb_message: deleting mid 36484 len 128
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Destroying timer event 0xa5d48e0 "smbd_deferred_open_timer"
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCLXL.DLL, after mapping access_mask=0x20089
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa6687b0
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x8e84, type= 0x40, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04, 10] smbd/open.c:617(share_conflict)
>  share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x44
>[2009/11/10 09:57:04, 10] smbd/open.c:620(share_conflict)
>  share_conflict: access_mask = 0x20089, share_access = 0x5
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] sa (0x5) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] sa (0x1) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] sa (0x5) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] sa (0x1) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] sa (0x5) & share (0x4) = 0x4
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] sa (0x1) & share (0x4) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:683(share_conflict)
>  share_conflict: No conflict.
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0775, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/11/10 09:57:04, 10] smbd/open.c:160(fd_open)
>  fd_open: name W32X86/3/PCLXL.DLL, flags = 00 mode = 0775, fd = 94. 
>[2009/11/10 09:57:04,  2] smbd/open.c:580(open_file)
>  brinegar opened file W32X86/3/PCLXL.DLL read=Yes write=No (numopen=64)
>[2009/11/10 09:57:04, 10] smbd/oplock.c:64(set_file_oplock)
>  Refusing level2 oplock, kernel oplocks don't support them
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 423, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/11/10 09:57:04, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/file_access.c:155(can_access_file_data)
>  can_access_file_data: requesting 0x2 on file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4976, open name = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 72
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x48
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2158 of length 76 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36548
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 70 13 ED 03                              ...p.í. 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:3879(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 423, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04,  3] smbd/trans2.c:4069(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo W32X86/3/PCLXL.DLL (fnum = 4976) level=1005 call=7 total_data=0
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/trans2.c:4332(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36548
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 10   00 00 00 00 00 00 2C 03   ........ ......,.
>  [0010] 00 00 00 00 00 01 00 00   00 00 00 00 00           ........ .....
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2159 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36612
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4976 (0x1370)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d10
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCLXL.DLL, offset = 0, count = 4096, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 0, count_out = 4096
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 94 0 4096 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=94 offset=0 count=4096 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 94 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=0 len=4096 unlocked for fnum 4976 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 4976 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCLXL.DLL): pos = 0, size = 4096, returned 4096
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4976 max=4096 nread=4096
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2160 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36676
>  smt_wct=3
>  smb_vwv[ 0]= 4976 (0x1370)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=94 fnum=4976 (numopen=64)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 423, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 423, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/PCLXL.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/PCLXL.DLL (numopen=63) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4976 (68 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36676
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2161 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36740
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5084 (0x13DC)
>  smb_vwv[ 3]=  512 (0x200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d10
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCLXL.DLL, offset = 512, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 512, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 66 512 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=66 offset=512 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 66 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=512 len=16384 unlocked for fnum 5084 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=512 len=16384 unlocked for fnum 5084 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCLXL.DLL): pos = 512, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=5084 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 144
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x90
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2162 of length 148 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=144
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36804
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=14848 (0x3A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 2D 00 55 00 53 00 5C   .3.\.e.n .-.U.S.\
>  [0020] 00 50 00 43 00 4C 00 58   00 4C 00 2E 00 44 00 4C   .P.C.L.X .L...D.L
>  [0030] 00 4C 00 2E 00 6D 00 75   00 69 00 00 00           .L...m.u .i...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en-US/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en-US/PCLXL.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en-US/PCLXL.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US/PCLXL.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en-US/PCLXL.DLL.mui, dirpath = W32X86/3, start = en-US/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US/PCLXL.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US/PCLXL.DLL.mui (len 5) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCLXL.DLL.mui (len 13) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US (len 5) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en-US
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en-US/PCLXL.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36804
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 138
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x8a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2163 of length 142 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=138
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36868
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13312 (0x3400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=55
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 5C 00 50 00 43 00 4C   .3.\.e.n .\.P.C.L
>  [0020] 00 58 00 4C 00 2E 00 44   00 4C 00 4C 00 2E 00 6D   .X.L...D .L.L...m
>  [0030] 00 75 00 69 00 00 00                              .u.i... 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en/PCLXL.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en/PCLXL.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN/PCLXL.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en/PCLXL.DLL.mui, dirpath = W32X86/3, start = en/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en/PCLXL.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en/PCLXL.DLL.mui (len 2) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCLXL.DLL.mui (len 13) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en (len 2) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en/PCLXL.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36868
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2164 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=36932
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5084 (0x13DC)
>  smb_vwv[ 3]=25088 (0x6200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCLXL.DLL, offset = 25088, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 25088, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 66 25088 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=66 offset=25088 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 66 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=25088 len=16384 unlocked for fnum 5084 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=25088 len=16384 unlocked for fnum 5084 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCLXL.DLL): pos = 25088, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=5084 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 124
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7c
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2165 of length 128 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=124
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=36996
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 9728 (0x2600)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=41
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 50 00 43   00 4C 00 58 00 4C 00 2E   .3.\.P.C .L.X.L..
>  [0020] 00 44 00 4C 00 4C 00 00   00                       .D.L.L.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCLXL.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCLXL.DLL] -> [W32X86/3/PCLXL.DLL]
>[2009/11/10 09:57:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 881, fnum = 4977 (69 used)
>[2009/11/10 09:57:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(W32X86/3/PCLXL.DLL) returning 0775
>[2009/11/10 09:57:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCLXL.DLL, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0775 oplock_request=3
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCLXL.DLL, after mapping access_mask=0x20089
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667f50
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 423, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04, 10] smbd/open.c:617(share_conflict)
>  share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x44
>[2009/11/10 09:57:04, 10] smbd/open.c:620(share_conflict)
>  share_conflict: access_mask = 0x20089, share_access = 0x5
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] sa (0x5) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] sa (0x1) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] sa (0x5) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] sa (0x1) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] sa (0x5) & share (0x4) = 0x4
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] sa (0x1) & share (0x4) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:683(share_conflict)
>  share_conflict: No conflict.
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0775, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/11/10 09:57:04, 10] smbd/open.c:160(fd_open)
>  fd_open: name W32X86/3/PCLXL.DLL, flags = 00 mode = 0775, fd = 94. 
>[2009/11/10 09:57:04,  2] smbd/open.c:580(open_file)
>  brinegar opened file W32X86/3/PCLXL.DLL read=Yes write=No (numopen=64)
>[2009/11/10 09:57:04, 10] smbd/oplock.c:64(set_file_oplock)
>  Refusing level2 oplock, kernel oplocks don't support them
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 424, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/11/10 09:57:04, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/file_access.c:155(can_access_file_data)
>  can_access_file_data: requesting 0x2 on file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4977, open name = W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 72
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x48
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2166 of length 76 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37060
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 71 13 ED 03                              ...q.í. 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:3879(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 424, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04,  3] smbd/trans2.c:4069(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo W32X86/3/PCLXL.DLL (fnum = 4977) level=1005 call=7 total_data=0
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/trans2.c:4332(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37060
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 10   00 00 00 00 00 00 2C 03   ........ ......,.
>  [0010] 00 00 00 00 00 01 00 00   00 00 00 00 00           ........ .....
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2167 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37124
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4977 (0x1371)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d10
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCLXL.DLL, offset = 0, count = 4096, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 0, count_out = 4096
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 94 0 4096 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=94 offset=0 count=4096 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 94 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=0 len=4096 unlocked for fnum 4977 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 4977 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCLXL.DLL): pos = 0, size = 4096, returned 4096
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4977 max=4096 nread=4096
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2168 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37188
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4977 (0x1371)
>  smb_vwv[ 3]=  512 (0x200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCLXL.DLL, offset = 512, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 512, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 94 512 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=94 offset=512 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 94 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=512 len=16384 unlocked for fnum 4977 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=512 len=16384 unlocked for fnum 4977 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCLXL.DLL): pos = 512, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4977 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 144
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x90
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2169 of length 148 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=144
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37252
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=14848 (0x3A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 2D 00 55 00 53 00 5C   .3.\.e.n .-.U.S.\
>  [0020] 00 50 00 43 00 4C 00 58   00 4C 00 2E 00 44 00 4C   .P.C.L.X .L...D.L
>  [0030] 00 4C 00 2E 00 6D 00 75   00 69 00 00 00           .L...m.u .i...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en-US/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en-US/PCLXL.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en-US/PCLXL.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US/PCLXL.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en-US/PCLXL.DLL.mui, dirpath = W32X86/3, start = en-US/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US/PCLXL.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US/PCLXL.DLL.mui (len 5) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCLXL.DLL.mui (len 13) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US (len 5) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en-US
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en-US/PCLXL.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37252
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 138
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x8a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2170 of length 142 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=138
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37316
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=13312 (0x3400)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=55
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 5C 00 50 00 43 00 4C   .3.\.e.n .\.P.C.L
>  [0020] 00 58 00 4C 00 2E 00 44   00 4C 00 4C 00 2E 00 6D   .X.L...D .L.L...m
>  [0030] 00 75 00 69 00 00 00                              .u.i... 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en/PCLXL.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en/PCLXL.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN/PCLXL.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en/PCLXL.DLL.mui, dirpath = W32X86/3, start = en/PCLXL.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en/PCLXL.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en/PCLXL.DLL.mui (len 2) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCLXL.DLL.mui (len 13) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en (len 2) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en/PCLXL.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37316
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2171 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37380
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4977 (0x1371)
>  smb_vwv[ 3]=25088 (0x6200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCLXL.DLL, offset = 25088, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 25088, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 94 25088 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=94 offset=25088 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 94 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=25088 len=16384 unlocked for fnum 4977 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=25088 len=16384 unlocked for fnum 4977 file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCLXL.DLL): pos = 25088, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4977 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 130
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x82
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2172 of length 134 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=130
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37444
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11264 (0x2C00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=47
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 50 00 43   00 4C 00 35 00 45 00 52   .3.\.P.C .L.5.E.R
>  [0020] 00 45 00 53 00 2E 00 44   00 4C 00 4C 00 00 00     .E.S...D .L.L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCL5ERES.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCL5ERES.DLL] -> [W32X86/3/PCL5ERES.DLL]
>[2009/11/10 09:57:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 882, fnum = 4978 (70 used)
>[2009/11/10 09:57:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(W32X86/3/PCL5ERES.DLL) returning 0775
>[2009/11/10 09:57:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCL5ERES.DLL, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0775 oplock_request=3
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCL5ERES.DLL, after mapping access_mask=0x20089
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667f70
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] smbd/open.c:846(send_break_message)
>  Sending break request to PID 12289
>[2009/11/10 09:57:04, 10] lib/messages_local.c:237(messaging_tdb_store)
>  messaging_tdb_store:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       array: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_REQUEST (774)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 44 92 03 00   89 00 02 00 01 00 00 00   .0..D... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   21 50 04 00 03 03 00 00   D...?.ùJ !P......
>  [0020] 00 00 00 00 63 7F 00 00   00 00 00 00 00 00 00 00   ....c... ........
>  [0030] 00 00 00 00 63 01 00 00   EF 21 02 00 00 00 FF FF   ....c... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] smbd/open.c:1029(defer_open)
>  defer_open_sharing_error: time [1257865024.156611] adding deferred open entry for mid 37444
>[2009/11/10 09:57:04, 10] smbd/process.c:638(push_deferred_smb_message)
>  push_deferred_open_smb_message: pushing message len 134 mid 37444 timeout time [1257865084.156611]
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "smbd_deferred_open_timer": 0xa5ad8a8
>[2009/11/10 09:57:04, 10] smbd/process.c:501(push_queued_message)
>  push_message: pushed message length 134 on deferred_open_queue
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x9244, type= 0x3, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x9244, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4978 (69 used)
>[2009/11/10 09:57:04, 10] smbd/open.c:3218(create_file_unixpath)
>  create_file_unixpath: NT_STATUS_SHARING_VIOLATION
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_SHARING_VIOLATION
>[2009/11/10 09:57:04, 10] lib/messages_local.c:73(messaging_tdb_signal_handler)
>  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
>[2009/11/10 09:57:04, 10] lib/messages_local.c:447(message_dispatch)
>  message_dispatch: received_messages = 1
>[2009/11/10 09:57:04, 10] lib/messages_local.c:196(messaging_tdb_fetch)
>  messaging_tdb_fetch:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       result: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_REQUEST (774)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 44 92 03 00   89 00 02 00 01 00 00 00   .0..D... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   21 50 04 00 03 03 00 00   D...?.ùJ !P......
>  [0020] 00 00 00 00 63 7F 00 00   00 00 00 00 00 00 00 00   ....c... ........
>  [0030] 00 00 00 00 63 01 00 00   EF 21 02 00 00 00 FF FF   ....c... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] smbd/oplock.c:486(process_oplock_break_message)
>  Got oplock break message from pid 12289: 303:7f63:0/355
>[2009/11/10 09:57:04,  3] smbd/oplock.c:260(initial_break_processing)
>  initial_break_processing: called for 303:7f63:0/355
>  Current oplocks_open (exclusive = 18, levelII = 0)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=51
>  smb_com=0x24
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=0
>  smb_tid=34
>  smb_pid=65535
>  smb_uid=0
>  smb_mid=65535
>  smt_wct=8
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 5085 (0x13DD)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "oplock_timeout_handler": 0xa5d48e0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 51
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x33
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2173 of length 55 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=51
>  smb_com=0x24
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=65535
>  smt_wct=8
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5085 (0x13DD)
>  smb_vwv[ 3]=   19 (0x13)
>  smb_vwv[ 4]=65535 (0xFFFF)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBlockingX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  5] smbd/reply.c:6958(reply_lockingX)
>  reply_lockingX: oplock break reply (0) from client for fnum = 5085
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d30
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x9244, type= 0x3, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x9244, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/PCL5ERES.DLL, file_id = 303:7f63:0 gen_id = 355 has kernel oplock state of 1.
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Destroying timer event 0xa5d48e0 "oplock_timeout_handler"
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x9244, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/messages_local.c:237(messaging_tdb_store)
>  messaging_tdb_store:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       array: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_RESPONSE (775)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 44 92 03 00   89 00 02 00 01 00 00 00   .0..D... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   21 50 04 00 03 03 00 00   D...?.ùJ !P......
>  [0020] 00 00 00 00 63 7F 00 00   00 00 00 00 00 00 00 00   ....c... ........
>  [0030] 00 00 00 00 63 01 00 00   EF 21 02 00 00 00 FF FF   ....c... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] lib/messages_local.c:73(messaging_tdb_signal_handler)
>  messaging_tdb_signal_handler: sig[10] count[1] msgs[1]
>[2009/11/10 09:57:04, 10] lib/messages_local.c:447(message_dispatch)
>  message_dispatch: received_messages = 1
>[2009/11/10 09:57:04, 10] lib/messages_local.c:196(messaging_tdb_fetch)
>  messaging_tdb_fetch:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       result: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_SMB_BREAK_RESPONSE (775)
>                  dest: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=66
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 01 30 00 00 44 92 03 00   89 00 02 00 01 00 00 00   .0..D... ........
>  [0010] 44 00 00 00 3F 7F F9 4A   21 50 04 00 03 03 00 00   D...?.ùJ !P......
>  [0020] 00 00 00 00 63 7F 00 00   00 00 00 00 00 00 00 00   ....c... ........
>  [0030] 00 00 00 00 63 01 00 00   EF 21 02 00 00 00 FF FF   ....c... ï!....ÿÿ
>  [0040] FF FF                                             ÿÿ 
>[2009/11/10 09:57:04, 10] smbd/oplock.c:703(process_oplock_break_response)
>  Got oplock break response from pid 12289: 303:7f63:0/355 mid 37444
>[2009/11/10 09:57:04, 10] smbd/process.c:541(schedule_deferred_open_smb_message)
>  schedule_deferred_open_smb_message: [0] msg_mid = 37444
>[2009/11/10 09:57:04, 10] smbd/process.c:556(schedule_deferred_open_smb_message)
>  schedule_deferred_open_smb_message: scheduling mid 37444
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "smbd_deferred_open_timer": 0xa624958
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Destroying timer event 0xa5ad8a8 "smbd_deferred_open_timer"
>[2009/11/10 09:57:04, 10] lib/events.c:105(run_events)
>  Running timed event "smbd_deferred_open_timer" 0xa624958
>[2009/11/10 09:57:04,  5] smbd/process.c:428(smbd_deferred_open_timer)
>  smbd_deferred_open_timer: trigger mid 37444.
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x82
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2174 of length 134 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=130
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37444
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11264 (0x2C00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=47
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 50 00 43   00 4C 00 35 00 45 00 52   .3.\.P.C .L.5.E.R
>  [0020] 00 45 00 53 00 2E 00 44   00 4C 00 4C 00 00 00     .E.S...D .L.L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCL5ERES.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCL5ERES.DLL] -> [W32X86/3/PCL5ERES.DLL]
>[2009/11/10 09:57:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 883, fnum = 4979 (70 used)
>[2009/11/10 09:57:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(W32X86/3/PCL5ERES.DLL) returning 0775
>[2009/11/10 09:57:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCL5ERES.DLL, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0775 oplock_request=3
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667f70
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x9244, type= 0x20, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x9244, type= 0x40, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] smbd/process.c:519(remove_deferred_open_smb_message)
>  remove_deferred_open_smb_message: deleting mid 37444 len 134
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Destroying timer event 0xa624958 "smbd_deferred_open_timer"
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCL5ERES.DLL, after mapping access_mask=0x20089
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa6687e0
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x0, private_options = 0x0, access_mask = 0x0, mid = 0x9244, type= 0x40, gen_id = 0, uid = 4294967295, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04, 10] smbd/open.c:617(share_conflict)
>  share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x44
>[2009/11/10 09:57:04, 10] smbd/open.c:620(share_conflict)
>  share_conflict: access_mask = 0x20089, share_access = 0x5
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] sa (0x5) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] sa (0x1) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] sa (0x5) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] sa (0x1) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] sa (0x5) & share (0x4) = 0x4
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] sa (0x1) & share (0x4) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:683(share_conflict)
>  share_conflict: No conflict.
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0775, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/11/10 09:57:04, 10] smbd/open.c:160(fd_open)
>  fd_open: name W32X86/3/PCL5ERES.DLL, flags = 00 mode = 0775, fd = 95. 
>[2009/11/10 09:57:04,  2] smbd/open.c:580(open_file)
>  brinegar opened file W32X86/3/PCL5ERES.DLL read=Yes write=No (numopen=65)
>[2009/11/10 09:57:04, 10] smbd/oplock.c:64(set_file_oplock)
>  Refusing level2 oplock, kernel oplocks don't support them
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 426, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/11/10 09:57:04, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/file_access.c:155(can_access_file_data)
>  can_access_file_data: requesting 0x2 on file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4979, open name = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 72
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x48
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2175 of length 76 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37508
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 73 13 ED 03                              ...s.í. 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:3879(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 426, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04,  3] smbd/trans2.c:4069(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo W32X86/3/PCL5ERES.DLL (fnum = 4979) level=1005 call=7 total_data=0
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/trans2.c:4332(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37508
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 20   00 00 00 00 00 00 24 10   .......  ......$.
>  [0010] 00 00 00 00 00 01 00 00   00 00 00 00 00           ........ .....
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2176 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37572
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4979 (0x1373)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d10
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 0, count = 4096, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 0, count_out = 4096
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 95 0 4096 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=95 offset=0 count=4096 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 95 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=0 len=4096 unlocked for fnum 4979 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 4979 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 0, size = 4096, returned 4096
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4979 max=4096 nread=4096
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2177 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37636
>  smt_wct=3
>  smb_vwv[ 0]= 4979 (0x1373)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=95 fnum=4979 (numopen=65)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 426, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 426, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/PCL5ERES.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/PCL5ERES.DLL (numopen=64) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4979 (69 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37636
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2178 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37700
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5085 (0x13DD)
>  smb_vwv[ 3]=  512 (0x200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d10
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 512, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 512, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 71 512 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=71 offset=512 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 71 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=512 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=512 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 512, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=5085 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2179 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37764
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5085 (0x13DD)
>  smb_vwv[ 3]=33280 (0x8200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 33280, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 33280, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 71 33280 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=71 offset=33280 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 71 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=33280 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=33280 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 33280, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=5085 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2180 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=37828
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5085 (0x13DD)
>  smb_vwv[ 3]=16896 (0x4200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 16896, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 16896, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 71 16896 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=71 offset=16896 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 71 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=16896 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=16896 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 16896, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=5085 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 150
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x96
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2181 of length 154 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=150
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37892
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=16384 (0x4000)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=67
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 37 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   7\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 2D 00 55 00 53 00 5C   .3.\.e.n .-.U.S.\
>  [0020] 00 50 00 43 00 4C 00 35   00 45 00 52 00 45 00 53   .P.C.L.5 .E.R.E.S
>  [0030] 00 2E 00 44 00 4C 00 4C   00 2E 00 6D 00 75 00 69   ...D.L.L ...m.u.i
>  [0040] 00 00 00                                          ... 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en-US/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en-US/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en-US/PCL5ERES.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US/PCL5ERES.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en-US/PCL5ERES.DLL.mui, dirpath = W32X86/3, start = en-US/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US/PCL5ERES.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US/PCL5ERES.DLL.mui (len 5) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCL5ERES.DLL.mui (len 16) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US (len 5) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en-US
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en-US/PCL5ERES.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37892
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 144
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x90
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2182 of length 148 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=144
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37956
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=14848 (0x3A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 5C 00 50 00 43 00 4C   .3.\.e.n .\.P.C.L
>  [0020] 00 35 00 45 00 52 00 45   00 53 00 2E 00 44 00 4C   .5.E.R.E .S...D.L
>  [0030] 00 4C 00 2E 00 6D 00 75   00 69 00 00 00           .L...m.u .i...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en/PCL5ERES.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN/PCL5ERES.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en/PCL5ERES.DLL.mui, dirpath = W32X86/3, start = en/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en/PCL5ERES.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en/PCL5ERES.DLL.mui (len 2) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCL5ERES.DLL.mui (len 16) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en (len 2) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en/PCL5ERES.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=37956
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2183 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=38020
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 5085 (0x13DD)
>  smb_vwv[ 3]= 4608 (0x1200)
>  smb_vwv[ 4]=    6 (0x6)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 397824, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 397824, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 71 397824 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=71 offset=397824 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 71 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=397824 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=397824 len=16384 unlocked for fnum 5085 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 397824, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=5085 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 130
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x82
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2184 of length 134 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=130
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38084
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=11264 (0x2C00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=47
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 50 00 43   00 4C 00 35 00 45 00 52   .3.\.P.C .L.5.E.R
>  [0020] 00 45 00 53 00 2E 00 44   00 4C 00 4C 00 00 00     .E.S...D .L.L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCL5ERES.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCL5ERES.DLL] -> [W32X86/3/PCL5ERES.DLL]
>[2009/11/10 09:57:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 884, fnum = 4980 (70 used)
>[2009/11/10 09:57:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(W32X86/3/PCL5ERES.DLL) returning 0775
>[2009/11/10 09:57:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCL5ERES.DLL, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0775 oplock_request=3
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=W32X86/3/PCL5ERES.DLL, after mapping access_mask=0x20089
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667f70
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 426, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04, 10] smbd/open.c:617(share_conflict)
>  share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x44
>[2009/11/10 09:57:04, 10] smbd/open.c:620(share_conflict)
>  share_conflict: access_mask = 0x20089, share_access = 0x5
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] sa (0x5) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] am (0x20089) & right (0x6) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] sa (0x1) & share (0x2) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] sa (0x5) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] am (0x20089) & right (0x21) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] sa (0x1) & share (0x1) = 0x1
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] sa (0x5) & share (0x4) = 0x4
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] am (0x20089) & right (0x10000) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] sa (0x1) & share (0x4) = 0x0
>[2009/11/10 09:57:04, 10] smbd/open.c:683(share_conflict)
>  share_conflict: No conflict.
>[2009/11/10 09:57:04, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x4 on file 
>[2009/11/10 09:57:04,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0775, access_mask = 0x20089, open_access_mask = 0x20089
>[2009/11/10 09:57:04, 10] smbd/open.c:160(fd_open)
>  fd_open: name W32X86/3/PCL5ERES.DLL, flags = 00 mode = 0775, fd = 95. 
>[2009/11/10 09:57:04,  2] smbd/open.c:580(open_file)
>  brinegar opened file W32X86/3/PCL5ERES.DLL read=Yes write=No (numopen=65)
>[2009/11/10 09:57:04, 10] smbd/oplock.c:64(set_file_oplock)
>  Refusing level2 oplock, kernel oplocks don't support them
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 427, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/11/10 09:57:04, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/file_access.c:155(can_access_file_data)
>  can_access_file_data: requesting 0x2 on file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4980, open name = W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 72
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x48
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2185 of length 76 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38148
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   24 (0x18)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 74 13 ED 03                              ...t.í. 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:3879(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 427, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04,  3] smbd/trans2.c:4069(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo W32X86/3/PCL5ERES.DLL (fnum = 4980) level=1005 call=7 total_data=0
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] smbd/trans2.c:4332(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38148
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 20   00 00 00 00 00 00 24 10   .......  ......$.
>  [0010] 00 00 00 00 00 01 00 00   00 00 00 00 00           ........ .....
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2186 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=38212
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4980 (0x1374)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 4096 (0x1000)
>  smb_vwv[ 6]= 4096 (0x1000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 4096 (0x1000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d10
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 0, count = 4096, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 0, count_out = 4096
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 95 0 4096 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=95 offset=0 count=4096 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 95 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=0 len=4096 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 0, size = 4096, returned 4096
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4980 max=4096 nread=4096
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2187 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=38276
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4980 (0x1374)
>  smb_vwv[ 3]=  512 (0x200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 512, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 512, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 95 512 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=95 offset=512 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 95 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=512 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=512 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 512, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4980 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2188 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=38340
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4980 (0x1374)
>  smb_vwv[ 3]=33280 (0x8200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 33280, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 33280, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 95 33280 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=95 offset=33280 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 95 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=33280 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=33280 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 33280, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4980 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2189 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=38404
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4980 (0x1374)
>  smb_vwv[ 3]=16896 (0x4200)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 16896, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 16896, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 95 16896 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=95 offset=16896 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 95 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=16896 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=16896 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 16896, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4980 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 150
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x96
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2190 of length 154 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=150
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38468
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=16384 (0x4000)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=67
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 2D 00 55 00 53 00 5C   .3.\.e.n .-.U.S.\
>  [0020] 00 50 00 43 00 4C 00 35   00 45 00 52 00 45 00 53   .P.C.L.5 .E.R.E.S
>  [0030] 00 2E 00 44 00 4C 00 4C   00 2E 00 6D 00 75 00 69   ...D.L.L ...m.u.i
>  [0040] 00 00 00                                          ... 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en-US/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en-US/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en-US/PCL5ERES.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US/PCL5ERES.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN-US]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en-US/PCL5ERES.DLL.mui, dirpath = W32X86/3, start = en-US/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US/PCL5ERES.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US/PCL5ERES.DLL.mui (len 5) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCL5ERES.DLL.mui (len 16) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en-US ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en-US (len 5) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en-US
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en-US/PCL5ERES.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38468
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 144
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x90
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2191 of length 148 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=144
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38532
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=14848 (0x3A00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=35072 (0x8900)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1280 (0x500)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 5C   .\.W.3.2 .X.8.6.\
>  [0010] 00 33 00 5C 00 65 00 6E   00 5C 00 50 00 43 00 4C   .3.\.e.n .\.P.C.L
>  [0020] 00 35 00 45 00 52 00 45   00 53 00 2E 00 44 00 4C   .5.E.R.E .S...D.L
>  [0030] 00 4C 00 2E 00 6D 00 75   00 69 00 00 00           .L...m.u .i...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = W32X86/3/en/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = W32X86/3/en/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/en/PCL5ERES.DLL.mui"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN/PCL5ERES.DLL.MUI]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [W32X86/3/EN]
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3] -> [W32X86/3]
>[2009/11/10 09:57:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = W32X86/3/en/PCL5ERES.DLL.mui, dirpath = W32X86/3, start = en/PCL5ERES.DLL.mui
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en/PCL5ERES.DLL.mui ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en/PCL5ERES.DLL.mui (len 2) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component PCL5ERES.DLL.mui (len 16) ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled en ?
>[2009/11/10 09:57:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component en (len 2) ?
>[2009/11/10 09:57:04,  5] smbd/filename.c:461(unix_convert)
>  Intermediate not found en
>[2009/11/10 09:57:04, 10] smbd/filename.c:729(unix_convert)
>  dirpath = [W32X86/3] start = [en/PCL5ERES.DLL.mui]
>[2009/11/10 09:57:04, 10] smbd/open.c:3508(create_file_default)
>  create_file: NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_PATH_NOT_FOUND
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa2
>  smb_rcls=58
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38532
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2192 of length 63 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=59399
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=38596
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4980 (0x1374)
>  smb_vwv[ 3]= 4608 (0x1200)
>  smb_vwv[ 4]=    6 (0x6)
>  smb_vwv[ 5]=16384 (0x4000)
>  smb_vwv[ 6]=16384 (0x4000)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=16384 (0x4000)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04, 10] locking/brlock.c:1849(brl_get_locks_internal)
>  brl_get_locks_internal: 0 current locks on file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/posix.c:284(is_posix_locked)
>  is_posix_locked: File W32X86/3/PCL5ERES.DLL, offset = 397824, count = 16384, type = READ
>[2009/11/10 09:57:04, 10] locking/posix.c:172(posix_lock_in_range)
>  posix_lock_in_range: offset_out = 397824, count_out = 16384
>[2009/11/10 09:57:04,  8] locking/posix.c:234(posix_fcntl_getlock)
>  posix_fcntl_getlock 95 397824 16384 0
>[2009/11/10 09:57:04,  8] lib/util.c:1832(fcntl_getlock)
>  fcntl_getlock fd=95 offset=397824 count=16384 type=0
>[2009/11/10 09:57:04,  3] lib/util.c:1856(fcntl_getlock)
>  fcntl_getlock: fd 95 is returned info 2 pid 0
>[2009/11/10 09:57:04,  8] locking/posix.c:264(posix_fcntl_getlock)
>  posix_fcntl_getlock: Lock query call successful
>[2009/11/10 09:57:04, 10] locking/brlock.c:1270(brl_locktest)
>  brl_locktest: posix start=397824 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] locking/locking.c:152(strict_lock_default)
>  strict_lock_default: flavour = WINDOWS_LOCK brl start=397824 len=16384 unlocked for fnum 4980 file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/fileio.c:105(read_file)
>  read_file (W32X86/3/PCL5ERES.DLL): pos = 397824, size = 16384, returned 16384
>[2009/11/10 09:57:04,  3] smbd/reply.c:3441(send_file_readX)
>  send_file_readX fnum=4980 max=16384 nread=16384
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 122
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2193 of length 126 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=122
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38660
>  smt_wct=15
>  smb_vwv[ 0]=   54 (0x36)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   54 (0x36)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 55 00 4E 00 49   00 44 00 52 00 56 00 2E   .\.U.N.I .D.R.V..
>  [0030] 00 44 00 4C 00 4C 00 00   00                       .D.L.L.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/UNIDRV.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/UNIDRV.DLL] -> [W32X86/3/UNIDRV.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = UNIDRV.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = UNIDRV.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa576560 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/UNIDRV.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:17 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 332, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 358, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/UNIDRV.DLL fname=UNIDRV.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38660
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 80 86 E5   AF 20 04 CA 01 80 09 F5   .......å ¯ .Ê...õ
>  [0020] 0F 16 62 CA 01 80 86 E5   AF 20 04 CA 01 80 86 E5   ..bÊ...å ¯ .Ê...å
>  [0030] AF 20 04 CA 01 00 BA 05   00 00 00 00 00 00 00 10   ¯ .Ê..º. ........
>  [0040] 00 00 00 00 00 20 00 00   00 14 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 55 00 4E 00 49   ........ ...U.N.I
>  [0070] 00 44 00 52 00 56 00 2E   00 44 00 4C 00 4C 00 00   .D.R.V.. .D.L.L..
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=UNIDRV.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2194 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38724
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 55 00 4E 00 49   00 44 00 52 00 56 00 55   .\.U.N.I .D.R.V.U
>  [0030] 00 49 00 2E 00 44 00 4C   00 4C 00 00 00           .I...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/UNIDRVUI.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/UNIDRVUI.DLL] -> [W32X86/3/UNIDRVUI.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = UNIDRVUI.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = UNIDRVUI.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b6078 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/UNIDRVUI.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:02 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 333, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 361, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/UNIDRVUI.DLL fname=UNIDRVUI.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38724
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 B5 F4   A6 20 04 CA 01 80 09 F5   ......µô ¦ .Ê...õ
>  [0020] 0F 16 62 CA 01 00 B5 F4   A6 20 04 CA 01 00 B5 F4   ..bÊ..µô ¦ .Ê..µô
>  [0030] A6 20 04 CA 01 00 68 0B   00 00 00 00 00 00 00 10   ¦ .Ê..h. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 55 00 4E 00 49   ........ ...U.N.I
>  [0070] 00 44 00 52 00 56 00 55   00 49 00 2E 00 44 00 4C   .D.R.V.U .I...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=UNIDRVUI.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2195 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38788
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 68 00 70 00 6D   00 63 00 70 00 61 00 70   .\.h.p.m .c.p.a.p
>  [0030] 00 36 00 2E 00 67 00 70   00 64 00 00 00           .6...g.p .d...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/hpmcpap6.gpd"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPMCPAP6.GPD] -> [W32X86/3/hpmcpap6.gpd]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = hpmcpap6.gpd
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = hpmcpap6.gpd, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c5d68 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/hpmcpap6.gpd
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 12, uid = 139759, flags = 0, file_id 303:7f51:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/hpmcpap6.gpd fname=hpmcpap6.gpd
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38788
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 88 44   E3 12 EA C9 01 00 02 3B   .......D ã.êÉ...;
>  [0020] FA 8B 61 CA 01 00 88 44   E3 12 EA C9 01 00 88 44   ú.aÊ...D ã.êÉ...D
>  [0030] E3 12 EA C9 01 8E B4 01   00 00 00 00 00 00 00 10   ã.êÉ..´. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 68 00 70 00 6D   ........ ...h.p.m
>  [0070] 00 63 00 70 00 61 00 70   00 36 00 2E 00 67 00 70   .c.p.a.p .6...g.p
>  [0080] 00 64 00 00 00                                    .d... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=hpmcpap6.gpd directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 122
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2196 of length 126 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=122
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38852
>  smt_wct=15
>  smb_vwv[ 0]=   54 (0x36)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   54 (0x36)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 55 00 4E 00 49   00 44 00 52 00 56 00 2E   .\.U.N.I .D.R.V..
>  [0030] 00 48 00 4C 00 50 00 00   00                       .H.L.P.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/UNIDRV.HLP"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/UNIDRV.HLP] -> [W32X86/3/UNIDRV.HLP]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = UNIDRV.HLP
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = UNIDRV.HLP, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa580d40 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/UNIDRV.HLP
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:23:14 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 13, uid = 139759, flags = 0, file_id 303:7f2b:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/UNIDRV.HLP fname=UNIDRV.HLP
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38852
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 00 4D BF   A9 11 EA C9 01 80 59 67   ......M¿ ©.êÉ..Yg
>  [0020] A4 8D 61 CA 01 00 4D BF   A9 11 EA C9 01 00 4D BF   ¤.aÊ..M¿ ©.êÉ..M¿
>  [0030] A9 11 EA C9 01 E9 52 00   00 00 00 00 00 00 00 10   ©.êÉ.éR. ........
>  [0040] 00 00 00 00 00 20 00 00   00 14 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 55 00 4E 00 49   ........ ...U.N.I
>  [0070] 00 44 00 52 00 56 00 2E   00 48 00 4C 00 50 00 00   .D.R.V.. .H.L.P..
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=UNIDRV.HLP directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2197 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38916
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 45 00 56 00 57 00 4E   .\.H.P.Z .E.V.W.N
>  [0030] 00 37 00 2E 00 44 00 4C   00 4C 00 00 00           .7...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZEVWN7.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZEVWN7.DLL] -> [W32X86/3/HPZEVWN7.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZEVWN7.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZEVWN7.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b5aa8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZEVWN7.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:59 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 334, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 364, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZEVWN7.DLL fname=HPZEVWN7.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38916
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 F1 2A   A5 20 04 CA 01 80 09 F5   ......ñ* ¥ .Ê...õ
>  [0020] 0F 16 62 CA 01 80 F1 2A   A5 20 04 CA 01 80 F1 2A   ..bÊ..ñ* ¥ .Ê..ñ*
>  [0030] A5 20 04 CA 01 00 9A 05   00 00 00 00 00 00 00 10   ¥ .Ê.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 45 00 56 00 57 00 4E   00 37 00 2E 00 44 00 4C   .E.V.W.N .7...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZEVWN7.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2198 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38980
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 53 00 54 00 57 00 4E   .\.H.P.Z .S.T.W.N
>  [0030] 00 37 00 2E 00 44 00 4C   00 4C 00 00 00           .7...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZSTWN7.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZSTWN7.DLL] -> [W32X86/3/HPZSTWN7.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZSTWN7.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZSTWN7.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5ce180 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZSTWN7.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:05:45 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 335, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 367, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZSTWN7.DLL fname=HPZSTWN7.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=38980
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 FA 31   37 1F 04 CA 01 80 09 F5   ......ú1 7..Ê...õ
>  [0020] 0F 16 62 CA 01 80 FA 31   37 1F 04 CA 01 80 FA 31   ..bÊ..ú1 7..Ê..ú1
>  [0030] 37 1F 04 CA 01 00 9C 34   00 00 00 00 00 00 00 40   7..Ê...4 .......@
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 53 00 54 00 57 00 4E   00 37 00 2E 00 44 00 4C   .S.T.W.N .7...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZSTWN7.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2199 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39044
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 55 00 49 00 57 00 4E   .\.H.P.Z .U.I.W.N
>  [0030] 00 37 00 2E 00 44 00 4C   00 4C 00 00 00           .7...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZUIWN7.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZUIWN7.DLL] -> [W32X86/3/HPZUIWN7.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZUIWN7.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZUIWN7.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c7690 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZUIWN7.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 336, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 370, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZUIWN7.DLL fname=HPZUIWN7.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39044
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 88 C3   A5 20 04 CA 01 80 09 F5   .......Ã ¥ .Ê...õ
>  [0020] 0F 16 62 CA 01 00 88 C3   A5 20 04 CA 01 00 88 C3   ..bÊ...Ã ¥ .Ê...Ã
>  [0030] A5 20 04 CA 01 00 F6 2A   00 00 00 00 00 00 00 30   ¥ .Ê..ö* .......0
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 55 00 49 00 57 00 4E   00 37 00 2E 00 44 00 4C   .U.I.W.N .7...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZUIWN7.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2200 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39108
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 36 00 52 00 57 00 4E   .\.H.P.Z .6.R.W.N
>  [0030] 00 37 00 2E 00 44 00 4C   00 4C 00 00 00           .7...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-114069156-2663528578-1345302127-280518
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-114069156-2663528578-1345302127-280518
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-123
>  SID[  6]: S-1-22-1-139759
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/11/10 09:57:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 139759
>  Primary group is 1001 and contains 2 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 123
>[2009/11/10 09:57:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,139759) gid=(0,1001)
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZ6RWN7.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZ6RWN7.DLL] -> [W32X86/3/HPZ6RWN7.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZ6RWN7.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZ6RWN7.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5ac198 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZ6RWN7.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 337, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 373, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZ6RWN7.DLL fname=HPZ6RWN7.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39108
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 8B 7F   91 20 04 CA 01 80 09 F5   ........ . .Ê...õ
>  [0020] 0F 16 62 CA 01 00 8B 7F   91 20 04 CA 01 00 8B 7F   ..bÊ.... . .Ê....
>  [0030] 91 20 04 CA 01 00 98 04   00 00 00 00 00 00 00 10   . .Ê.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 36 00 52 00 57 00 4E   00 37 00 2E 00 44 00 4C   .6.R.W.N .7...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZ6RWN7.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2201 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39172
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 36 00 43 00 57 00 4E   .\.H.P.Z .6.C.W.N
>  [0030] 00 37 00 2E 00 49 00 4E   00 49 00 00 00           .7...I.N .I...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZ6CWN7.INI"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZ6CWN7.INI] -> [W32X86/3/HPZ6CWN7.INI]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZ6CWN7.INI
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZ6CWN7.INI, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b91d0 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZ6CWN7.INI
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 18, uid = 139759, flags = 0, file_id 303:7f56:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZ6CWN7.INI fname=HPZ6CWN7.INI
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39172
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 FF D2   E9 12 EA C9 01 00 02 3B   ......ÿÒ é.êÉ...;
>  [0020] FA 8B 61 CA 01 80 FF D2   E9 12 EA C9 01 80 FF D2   ú.aÊ..ÿÒ é.êÉ..ÿÒ
>  [0030] E9 12 EA C9 01 A4 00 00   00 00 00 00 00 00 00 10   é.êÉ.¤.. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 36 00 43 00 57 00 4E   00 37 00 2E 00 49 00 4E   .6.C.W.N .7...I.N
>  [0080] 00 49 00 00 00                                    .I... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZ6CWN7.INI directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2202 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39236
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 53 00 4D 00 57 00 4E   .\.H.P.Z .S.M.W.N
>  [0030] 00 37 00 2E 00 47 00 50   00 44 00 00 00           .7...G.P .D...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZSMWN7.GPD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZSMWN7.GPD] -> [W32X86/3/HPZSMWN7.GPD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZSMWN7.GPD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZSMWN7.GPD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5cf1b8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZSMWN7.GPD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 19, uid = 139759, flags = 0, file_id 303:7f57:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZSMWN7.GPD fname=HPZSMWN7.GPD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39236
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 FF D2   E9 12 EA C9 01 00 02 3B   ......ÿÒ é.êÉ...;
>  [0020] FA 8B 61 CA 01 80 FF D2   E9 12 EA C9 01 80 FF D2   ú.aÊ..ÿÒ é.êÉ..ÿÒ
>  [0030] E9 12 EA C9 01 28 8C 01   00 00 00 00 00 00 00 10   é.êÉ.(.. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 53 00 4D 00 57 00 4E   00 37 00 2E 00 47 00 50   .S.M.W.N .7...G.P
>  [0080] 00 44 00 00 00                                    .D... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZSMWN7.GPD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2203 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39300
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 36 00 4D 00 57 00 4E   .\.H.P.Z .6.M.W.N
>  [0030] 00 37 00 2E 00 47 00 50   00 44 00 00 00           .7...G.P .D...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZ6MWN7.GPD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZ6MWN7.GPD] -> [W32X86/3/HPZ6MWN7.GPD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZ6MWN7.GPD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZ6MWN7.GPD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5ca4b0 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZ6MWN7.GPD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 20, uid = 139759, flags = 0, file_id 303:7f58:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZ6MWN7.GPD fname=HPZ6MWN7.GPD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39300
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 FF D2   E9 12 EA C9 01 00 02 3B   ......ÿÒ é.êÉ...;
>  [0020] FA 8B 61 CA 01 80 FF D2   E9 12 EA C9 01 80 FF D2   ú.aÊ..ÿÒ é.êÉ..ÿÒ
>  [0030] E9 12 EA C9 01 61 3C 00   00 00 00 00 00 00 00 10   é.êÉ.a<. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 36 00 4D 00 57 00 4E   00 37 00 2E 00 47 00 50   .6.M.W.N .7...G.P
>  [0080] 00 44 00 00 00                                    .D... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZ6MWN7.GPD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2204 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39364
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 68 00 70 00 6D   00 63 00 70 00 61 00 70   .\.h.p.m .c.p.a.p
>  [0030] 00 36 00 2E 00 78 00 6D   00 6C 00 00 00           .6...x.m .l...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/hpmcpap6.xml"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPMCPAP6.XML] -> [W32X86/3/hpmcpap6.xml]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = hpmcpap6.xml
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = hpmcpap6.xml, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b9290 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/hpmcpap6.xml
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 21, uid = 139759, flags = 0, file_id 303:7f59:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/hpmcpap6.xml fname=hpmcpap6.xml
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39364
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 88 44   E3 12 EA C9 01 00 02 3B   .......D ã.êÉ...;
>  [0020] FA 8B 61 CA 01 00 88 44   E3 12 EA C9 01 00 88 44   ú.aÊ...D ã.êÉ...D
>  [0030] E3 12 EA C9 01 F6 67 00   00 00 00 00 00 00 00 10   ã.êÉ.ög. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 68 00 70 00 6D   ........ ...h.p.m
>  [0070] 00 63 00 70 00 61 00 70   00 36 00 2E 00 78 00 6D   .c.p.a.p .6...x.m
>  [0080] 00 6C 00 00 00                                    .l... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=hpmcpap6.xml directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2205 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39428
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 53 00 43 00 57 00 4E   .\.H.P.Z .S.C.W.N
>  [0030] 00 37 00 2E 00 44 00 54   00 44 00 00 00           .7...D.T .D...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZSCWN7.DTD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZSCWN7.DTD] -> [W32X86/3/HPZSCWN7.DTD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZSCWN7.DTD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZSCWN7.DTD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5bf208 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZSCWN7.DTD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 22, uid = 139759, flags = 0, file_id 303:7f5a:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZSCWN7.DTD fname=HPZSCWN7.DTD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39428
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 FF D2   E9 12 EA C9 01 00 02 3B   ......ÿÒ é.êÉ...;
>  [0020] FA 8B 61 CA 01 80 FF D2   E9 12 EA C9 01 80 FF D2   ú.aÊ..ÿÒ é.êÉ..ÿÒ
>  [0030] E9 12 EA C9 01 56 12 00   00 00 00 00 00 00 00 10   é.êÉ.V.. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 53 00 43 00 57 00 4E   00 37 00 2E 00 44 00 54   .S.C.W.N .7...D.T
>  [0080] 00 44 00 00 00                                    .D... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZSCWN7.DTD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2206 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39492
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 43   00 44 00 4D 00 43 00 4C   .\.H.P.C .D.M.C.L
>  [0030] 00 48 00 2E 00 44 00 4C   00 4C 00 00 00           .H...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPCDMCLH.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPCDMCLH.DLL] -> [W32X86/3/HPCDMCLH.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPCDMCLH.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPCDMCLH.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa585c28 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPCDMCLH.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 22 Jun 2009 06:58:10 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 338, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 376, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPCDMCLH.DLL fname=HPCDMCLH.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39492
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 ED C8   E9 8C F3 C9 01 80 09 F5   ......íÈ é.óÉ...õ
>  [0020] 0F 16 62 CA 01 00 ED C8   E9 8C F3 C9 01 00 ED C8   ..bÊ..íÈ é.óÉ..íÈ
>  [0030] E9 8C F3 C9 01 00 8C 05   00 00 00 00 00 00 00 10   é.óÉ.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 43   ........ ...H.P.C
>  [0070] 00 44 00 4D 00 43 00 4C   00 48 00 2E 00 44 00 4C   .D.M.C.L .H...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPCDMCLH.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2207 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39556
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 4D   00 43 00 50 00 41 00 50   .\.H.P.M .C.P.A.P
>  [0030] 00 36 00 2E 00 43 00 46   00 47 00 00 00           .6...C.F .G...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPMCPAP6.CFG"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPMCPAP6.CFG] -> [W32X86/3/HPMCPAP6.CFG]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPMCPAP6.CFG
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPMCPAP6.CFG, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa569fc8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPMCPAP6.CFG
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 24, uid = 139759, flags = 0, file_id 303:7f5b:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPMCPAP6.CFG fname=HPMCPAP6.CFG
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39556
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 88 44   E3 12 EA C9 01 00 02 3B   .......D ã.êÉ...;
>  [0020] FA 8B 61 CA 01 00 88 44   E3 12 EA C9 01 00 88 44   ú.aÊ...D ã.êÉ...D
>  [0030] E3 12 EA C9 01 87 9F 01   00 00 00 00 00 00 00 10   ã.êÉ.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 4D   ........ ...H.P.M
>  [0070] 00 43 00 50 00 41 00 50   00 36 00 2E 00 43 00 46   .C.P.A.P .6...C.F
>  [0080] 00 47 00 00 00                                    .G... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPMCPAP6.CFG directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2208 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39620
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 4C 00 53 00 57 00 4E   .\.H.P.Z .L.S.W.N
>  [0030] 00 37 00 2E 00 44 00 4C   00 4C 00 00 00           .7...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZLSWN7.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZLSWN7.DLL] -> [W32X86/3/HPZLSWN7.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZLSWN7.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZLSWN7.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c92f0 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZLSWN7.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 339, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 379, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZLSWN7.DLL fname=HPZLSWN7.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39620
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 88 C3   A5 20 04 CA 01 80 09 F5   .......Ã ¥ .Ê...õ
>  [0020] 0F 16 62 CA 01 00 88 C3   A5 20 04 CA 01 00 88 C3   ..bÊ...Ã ¥ .Ê...Ã
>  [0030] A5 20 04 CA 01 00 12 17   00 00 00 00 00 00 00 20   ¥ .Ê.... ....... 
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 4C 00 53 00 57 00 4E   00 37 00 2E 00 44 00 4C   .L.S.W.N .7...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZLSWN7.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2209 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39684
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 53 00 53 00 57 00 4E   .\.H.P.Z .S.S.W.N
>  [0030] 00 37 00 2E 00 44 00 4C   00 4C 00 00 00           .7...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZSSWN7.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZSSWN7.DLL] -> [W32X86/3/HPZSSWN7.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZSSWN7.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZSSWN7.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c42e8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZSSWN7.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:05:44 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 340, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 382, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZSSWN7.DLL fname=HPZSSWN7.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39684
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 64 99   36 1F 04 CA 01 80 09 F5   ......d. 6..Ê...õ
>  [0020] 0F 16 62 CA 01 00 64 99   36 1F 04 CA 01 00 64 99   ..bÊ..d. 6..Ê..d.
>  [0030] 36 1F 04 CA 01 00 94 08   00 00 00 00 00 00 00 10   6..Ê.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 53 00 53 00 57 00 4E   00 37 00 2E 00 44 00 4C   .S.S.W.N .7...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZSSWN7.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2210 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39748
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 42   00 4D 00 49 00 41 00 50   .\.H.P.B .M.I.A.P
>  [0030] 00 49 00 2E 00 44 00 4C   00 4C 00 00 00           .I...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPBMIAPI.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPBMIAPI.DLL] -> [W32X86/3/HPBMIAPI.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPBMIAPI.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPBMIAPI.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5bc2e8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPBMIAPI.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:24 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 341, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 385, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPBMIAPI.DLL fname=HPBMIAPI.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39748
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 5E 4E   90 20 04 CA 01 80 09 F5   ......^N . .Ê...õ
>  [0020] 0F 16 62 CA 01 00 5E 4E   90 20 04 CA 01 00 5E 4E   ..bÊ..^N . .Ê..^N
>  [0030] 90 20 04 CA 01 00 6E 00   00 00 00 00 00 00 00 10   . .Ê..n. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 42   ........ ...H.P.B
>  [0070] 00 4D 00 49 00 41 00 50   00 49 00 2E 00 44 00 4C   .M.I.A.P .I...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPBMIAPI.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 124
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7c
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2211 of length 128 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=124
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39812
>  smt_wct=15
>  smb_vwv[ 0]=   56 (0x38)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   56 (0x38)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=59
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 42   00 4D 00 49 00 4E 00 49   .\.H.P.B .M.I.N.I
>  [0030] 00 2E 00 44 00 4C 00 4C   00 00 00                 ...D.L.L ...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPBMINI.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPBMINI.DLL] -> [W32X86/3/HPBMINI.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPBMINI.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPBMINI.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5bf588 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPBMINI.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 22 Jun 2009 06:58:08 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 342, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 388, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPBMINI.DLL fname=HPBMINI.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39812
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 00 C0 97   E8 8C F3 C9 01 80 09 F5   ......À. è.óÉ...õ
>  [0020] 0F 16 62 CA 01 00 C0 97   E8 8C F3 C9 01 00 C0 97   ..bÊ..À. è.óÉ..À.
>  [0030] E8 8C F3 C9 01 00 20 00   00 00 00 00 00 00 00 10   è.óÉ.. . ........
>  [0040] 00 00 00 00 00 20 00 00   00 16 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 42   ........ ...H.P.B
>  [0070] 00 4D 00 49 00 4E 00 49   00 2E 00 44 00 4C 00 4C   .M.I.N.I ...D.L.L
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPBMINI.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 122
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2212 of length 126 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=122
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39876
>  smt_wct=15
>  smb_vwv[ 0]=   54 (0x36)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   54 (0x36)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 42   00 4F 00 49 00 44 00 2E   .\.H.P.B .O.I.D..
>  [0030] 00 44 00 4C 00 4C 00 00   00                       .D.L.L.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPBOID.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPBOID.DLL] -> [W32X86/3/HPBOID.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPBOID.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPBOID.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa586fb8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPBOID.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 343, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 391, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPBOID.DLL fname=HPBOID.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39876
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 80 F4 E6   90 20 04 CA 01 80 09 F5   ......ôæ . .Ê...õ
>  [0020] 0F 16 62 CA 01 80 F4 E6   90 20 04 CA 01 80 F4 E6   ..bÊ..ôæ . .Ê..ôæ
>  [0030] 90 20 04 CA 01 00 74 00   00 00 00 00 00 00 00 10   . .Ê..t. ........
>  [0040] 00 00 00 00 00 20 00 00   00 14 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 42   ........ ...H.P.B
>  [0070] 00 4F 00 49 00 44 00 2E   00 44 00 4C 00 4C 00 00   .O.I.D.. .D.L.L..
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPBOID.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2213 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39940
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 42   00 4F 00 49 00 44 00 50   .\.H.P.B .O.I.D.P
>  [0030] 00 53 00 2E 00 44 00 4C   00 4C 00 00 00           .S...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPBOIDPS.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPBOIDPS.DLL] -> [W32X86/3/HPBOIDPS.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPBOIDPS.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPBOIDPS.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c5888 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPBOIDPS.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 344, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 394, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPBOIDPS.DLL fname=HPBOIDPS.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=39940
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 F4 E6   90 20 04 CA 01 80 09 F5   ......ôæ . .Ê...õ
>  [0020] 0F 16 62 CA 01 80 F4 E6   90 20 04 CA 01 80 F4 E6   ..bÊ..ôæ . .Ê..ôæ
>  [0030] 90 20 04 CA 01 00 30 00   00 00 00 00 00 00 00 10   . .Ê..0. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 42   ........ ...H.P.B
>  [0070] 00 4F 00 49 00 44 00 50   00 53 00 2E 00 44 00 4C   .O.I.D.P .S...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPBOIDPS.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 122
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2214 of length 126 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=122
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40004
>  smt_wct=15
>  smb_vwv[ 0]=   54 (0x36)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   54 (0x36)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 42   00 50 00 52 00 4F 00 2E   .\.H.P.B .P.R.O..
>  [0030] 00 44 00 4C 00 4C 00 00   00                       .D.L.L.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPBPRO.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPBPRO.DLL] -> [W32X86/3/HPBPRO.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPBPRO.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPBPRO.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b7678 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPBPRO.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 345, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 397, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPBPRO.DLL fname=HPBPRO.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40004
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 80 F4 E6   90 20 04 CA 01 80 09 F5   ......ôæ . .Ê...õ
>  [0020] 0F 16 62 CA 01 80 F4 E6   90 20 04 CA 01 80 F4 E6   ..bÊ..ôæ . .Ê..ôæ
>  [0030] 90 20 04 CA 01 00 AC 00   00 00 00 00 00 00 00 10   . .Ê..¬. ........
>  [0040] 00 00 00 00 00 20 00 00   00 14 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 42   ........ ...H.P.B
>  [0070] 00 50 00 52 00 4F 00 2E   00 44 00 4C 00 4C 00 00   .P.R.O.. .D.L.L..
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPBPRO.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2215 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40068
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 42   00 50 00 52 00 4F 00 50   .\.H.P.B .P.R.O.P
>  [0030] 00 53 00 2E 00 44 00 4C   00 4C 00 00 00           .S...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPBPROPS.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPBPROPS.DLL] -> [W32X86/3/HPBPROPS.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPBPROPS.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPBPROPS.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5ed838 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPBPROPS.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 346, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 400, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPBPROPS.DLL fname=HPBPROPS.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40068
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 F4 E6   90 20 04 CA 01 80 09 F5   ......ôæ . .Ê...õ
>  [0020] 0F 16 62 CA 01 80 F4 E6   90 20 04 CA 01 80 F4 E6   ..bÊ..ôæ . .Ê..ôæ
>  [0030] 90 20 04 CA 01 00 30 00   00 00 00 00 00 00 00 10   . .Ê..0. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 42   ........ ...H.P.B
>  [0070] 00 50 00 52 00 4F 00 50   00 53 00 2E 00 44 00 4C   .P.R.O.P .S...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPBPROPS.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2216 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40132
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 45   00 41 00 43 00 4C 00 48   .\.H.P.E .A.C.L.H
>  [0030] 00 4E 00 2E 00 48 00 50   00 49 00 00 00           .N...H.P .I...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPEACLHN.HPI"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPEACLHN.HPI] -> [W32X86/3/HPEACLHN.HPI]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPEACLHN.HPI
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPEACLHN.HPI, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b7610 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPEACLHN.HPI
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:31:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 33, uid = 139759, flags = 0, file_id 303:7f44:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPEACLHN.HPI fname=HPEACLHN.HPI
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40132
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 2E E2   E0 12 EA C9 01 00 F0 FF   .......â à.êÉ..ðÿ
>  [0020] A4 8D 61 CA 01 00 2E E2   E0 12 EA C9 01 00 2E E2   ¤.aÊ...â à.êÉ...â
>  [0030] E0 12 EA C9 01 D4 49 00   00 00 00 00 00 00 00 10   à.êÉ.ÔI. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 45   ........ ...H.P.E
>  [0070] 00 41 00 43 00 4C 00 48   00 4E 00 2E 00 48 00 50   .A.C.L.H .N...H.P
>  [0080] 00 49 00 00 00                                    .I... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPEACLHN.HPI directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2217 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40196
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 49 00 44 00 52 00 31   .\.H.P.Z .I.D.R.1
>  [0030] 00 32 00 2E 00 44 00 4C   00 4C 00 00 00           .2...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZIDR12.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZIDR12.DLL] -> [W32X86/3/HPZIDR12.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZIDR12.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZIDR12.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5e9fd8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZIDR12.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 347, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 403, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZIDR12.DLL fname=HPZIDR12.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40196
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 8B 7F   91 20 04 CA 01 80 09 F5   ........ . .Ê...õ
>  [0020] 0F 16 62 CA 01 00 8B 7F   91 20 04 CA 01 00 8B 7F   ..bÊ.... . .Ê....
>  [0030] 91 20 04 CA 01 00 D2 00   00 00 00 00 00 00 00 10   . .Ê..Ò. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 49 00 44 00 52 00 31   00 32 00 2E 00 44 00 4C   .I.D.R.1 .2...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZIDR12.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2218 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40260
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 49 00 4E 00 57 00 31   .\.H.P.Z .I.N.W.1
>  [0030] 00 32 00 2E 00 44 00 4C   00 4C 00 00 00           .2...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZINW12.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZINW12.DLL] -> [W32X86/3/HPZINW12.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZINW12.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZINW12.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa581d38 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZINW12.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 348, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 406, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZINW12.DLL fname=HPZINW12.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40260
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 8B 7F   91 20 04 CA 01 80 09 F5   ........ . .Ê...õ
>  [0020] 0F 16 62 CA 01 00 8B 7F   91 20 04 CA 01 00 8B 7F   ..bÊ.... . .Ê....
>  [0030] 91 20 04 CA 01 00 B0 00   00 00 00 00 00 00 00 10   . .Ê..°. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 49 00 4E 00 57 00 31   00 32 00 2E 00 44 00 4C   .I.N.W.1 .2...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZINW12.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2219 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40324
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 49 00 50 00 4D 00 31   .\.H.P.Z .I.P.M.1
>  [0030] 00 32 00 2E 00 44 00 4C   00 4C 00 00 00           .2...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZIPM12.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZIPM12.DLL] -> [W32X86/3/HPZIPM12.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZIPM12.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZIPM12.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5f7290 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZIPM12.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 349, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 409, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZIPM12.DLL fname=HPZIPM12.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40324
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 8B 7F   91 20 04 CA 01 80 09 F5   ........ . .Ê...õ
>  [0020] 0F 16 62 CA 01 00 8B 7F   91 20 04 CA 01 00 8B 7F   ..bÊ.... . .Ê....
>  [0030] 91 20 04 CA 01 00 D4 00   00 00 00 00 00 00 00 10   . .Ê..Ô. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 49 00 50 00 4D 00 31   00 32 00 2E 00 44 00 4C   .I.P.M.1 .2...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZIPM12.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2220 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40388
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 49 00 50 00 52 00 31   .\.H.P.Z .I.P.R.1
>  [0030] 00 32 00 2E 00 44 00 4C   00 4C 00 00 00           .2...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZIPR12.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZIPR12.DLL] -> [W32X86/3/HPZIPR12.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZIPR12.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZIPR12.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa581ed8 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZIPR12.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 350, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 412, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZIPR12.DLL fname=HPZIPR12.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40388
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 8B 7F   91 20 04 CA 01 00 A0 8D   ........ . .Ê.. .
>  [0020] 10 16 62 CA 01 00 8B 7F   91 20 04 CA 01 00 8B 7F   ..bÊ.... . .Ê....
>  [0030] 91 20 04 CA 01 00 94 00   00 00 00 00 00 00 00 10   . .Ê.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 49 00 50 00 52 00 31   00 32 00 2E 00 44 00 4C   .I.P.R.1 .2...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZIPR12.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2221 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40452
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 49 00 50 00 54 00 31   .\.H.P.Z .I.P.T.1
>  [0030] 00 32 00 2E 00 44 00 4C   00 4C 00 00 00           .2...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZIPT12.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZIPT12.DLL] -> [W32X86/3/HPZIPT12.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZIPT12.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZIPT12.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5cc7d0 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZIPT12.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 351, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 415, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZIPT12.DLL fname=HPZIPT12.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40452
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 8B 7F   91 20 04 CA 01 00 A0 8D   ........ . .Ê.. .
>  [0020] 10 16 62 CA 01 00 8B 7F   91 20 04 CA 01 00 8B 7F   ..bÊ.... . .Ê....
>  [0030] 91 20 04 CA 01 00 84 00   00 00 00 00 00 00 00 10   . .Ê.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 49 00 50 00 54 00 31   00 32 00 2E 00 44 00 4C   .I.P.T.1 .2...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZIPT12.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2222 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40516
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 48 00 50 00 5A   00 49 00 53 00 4E 00 31   .\.H.P.Z .I.S.N.1
>  [0030] 00 32 00 2E 00 44 00 4C   00 4C 00 00 00           .2...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/HPZISN12.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/HPZISN12.DLL] -> [W32X86/3/HPZISN12.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = HPZISN12.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = HPZISN12.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c8388 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/HPZISN12.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 352, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 418, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/HPZISN12.DLL fname=HPZISN12.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40516
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 00 8B 7F   91 20 04 CA 01 00 A0 8D   ........ . .Ê.. .
>  [0020] 10 16 62 CA 01 00 8B 7F   91 20 04 CA 01 00 8B 7F   ..bÊ.... . .Ê....
>  [0030] 91 20 04 CA 01 00 54 00   00 00 00 00 00 00 00 10   . .Ê..T. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 48 00 50 00 5A   ........ ...H.P.Z
>  [0070] 00 49 00 53 00 4E 00 31   00 32 00 2E 00 44 00 4C   .I.S.N.1 .2...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=HPZISN12.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 122
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2223 of length 126 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=122
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40580
>  smt_wct=15
>  smb_vwv[ 0]=   54 (0x36)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   54 (0x36)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 55 00 4E 00 49   00 52 00 45 00 53 00 2E   .\.U.N.I .R.E.S..
>  [0030] 00 44 00 4C 00 4C 00 00   00                       .D.L.L.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/UNIRES.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/UNIRES.DLL] -> [W32X86/3/UNIRES.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = UNIRES.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = UNIRES.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5cbba0 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:52 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 353, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 421, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/UNIRES.DLL fname=UNIRES.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40580
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 00 A4 E4   82 1F 04 CA 01 00 A0 8D   ......¤ä ...Ê.. .
>  [0020] 10 16 62 CA 01 00 A4 E4   82 1F 04 CA 01 00 A4 E4   ..bÊ..¤ä ...Ê..¤ä
>  [0030] 82 1F 04 CA 01 00 A2 0B   00 00 00 00 00 00 00 10   ...Ê..¢. ........
>  [0040] 00 00 00 00 00 20 00 00   00 14 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 55 00 4E 00 49   ........ ...U.N.I
>  [0070] 00 52 00 45 00 53 00 2E   00 44 00 4C 00 4C 00 00   .R.E.S.. .D.L.L..
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=UNIRES.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2224 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40644
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 53 00 54 00 44   00 4E 00 41 00 4D 00 45   .\.S.T.D .N.A.M.E
>  [0030] 00 53 00 2E 00 47 00 50   00 44 00 00 00           .S...G.P .D...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/STDNAMES.GPD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/STDNAMES.GPD] -> [W32X86/3/STDNAMES.GPD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = STDNAMES.GPD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = STDNAMES.GPD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5d4d90 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/STDNAMES.GPD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:38:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 41, uid = 139759, flags = 0, file_id 303:7f46:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/STDNAMES.GPD fname=STDNAMES.GPD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40644
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 A3 66   C0 13 EA C9 01 00 F0 FF   ......£f À.êÉ..ðÿ
>  [0020] A4 8D 61 CA 01 80 A3 66   C0 13 EA C9 01 80 A3 66   ¤.aÊ..£f À.êÉ..£f
>  [0030] C0 13 EA C9 01 1A 38 00   00 00 00 00 00 00 00 10   À.êÉ..8. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 53 00 54 00 44   ........ ...S.T.D
>  [0070] 00 4E 00 41 00 4D 00 45   00 53 00 2E 00 47 00 50   .N.A.M.E .S...G.P
>  [0080] 00 44 00 00 00                                    .D... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=STDNAMES.GPD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2225 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40708
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 53 00 54 00 44   00 44 00 54 00 59 00 50   .\.S.T.D .D.T.Y.P
>  [0030] 00 45 00 2E 00 47 00 44   00 4C 00 00 00           .E...G.D .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/STDDTYPE.GDL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/STDDTYPE.GDL] -> [W32X86/3/STDDTYPE.GDL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = STDDTYPE.GDL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = STDDTYPE.GDL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa585d98 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/STDDTYPE.GDL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:38:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 42, uid = 139759, flags = 0, file_id 303:7f47:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/STDDTYPE.GDL fname=STDDTYPE.GDL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40708
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 A3 66   C0 13 EA C9 01 00 F0 FF   ......£f À.êÉ..ðÿ
>  [0020] A4 8D 61 CA 01 80 A3 66   C0 13 EA C9 01 80 A3 66   ¤.aÊ..£f À.êÉ..£f
>  [0030] C0 13 EA C9 01 04 5D 00   00 00 00 00 00 00 00 10   À.êÉ..]. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 53 00 54 00 44   ........ ...S.T.D
>  [0070] 00 44 00 54 00 59 00 50   00 45 00 2E 00 47 00 44   .D.T.Y.P .E...G.D
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=STDDTYPE.GDL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2226 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40772
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 53 00 54 00 44   00 53 00 43 00 48 00 45   .\.S.T.D .S.C.H.E
>  [0030] 00 4D 00 2E 00 47 00 44   00 4C 00 00 00           .M...G.D .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/STDSCHEM.GDL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/STDSCHEM.GDL] -> [W32X86/3/STDSCHEM.GDL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = STDSCHEM.GDL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = STDSCHEM.GDL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa576560 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/STDSCHEM.GDL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:38:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 43, uid = 139759, flags = 0, file_id 303:7f48:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/STDSCHEM.GDL fname=STDSCHEM.GDL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40772
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 A3 66   C0 13 EA C9 01 00 F0 FF   ......£f À.êÉ..ðÿ
>  [0020] A4 8D 61 CA 01 80 A3 66   C0 13 EA C9 01 80 A3 66   ¤.aÊ..£f À.êÉ..£f
>  [0030] C0 13 EA C9 01 EC E6 00   00 00 00 00 00 00 00 10   À.êÉ.ìæ. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 53 00 54 00 44   ........ ...S.T.D
>  [0070] 00 53 00 43 00 48 00 45   00 4D 00 2E 00 47 00 44   .S.C.H.E .M...G.D
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=STDSCHEM.GDL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2227 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40836
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 53 00 54 00 44   00 53 00 43 00 48 00 4D   .\.S.T.D .S.C.H.M
>  [0030] 00 58 00 2E 00 47 00 44   00 4C 00 00 00           .X...G.D .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/STDSCHMX.GDL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/STDSCHMX.GDL] -> [W32X86/3/STDSCHMX.GDL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = STDSCHMX.GDL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = STDSCHMX.GDL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b6078 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/STDSCHMX.GDL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:38:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 44, uid = 139759, flags = 0, file_id 303:7f49:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/STDSCHMX.GDL fname=STDSCHMX.GDL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40836
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 A3 66   C0 13 EA C9 01 00 F0 FF   ......£f À.êÉ..ðÿ
>  [0020] A4 8D 61 CA 01 80 A3 66   C0 13 EA C9 01 80 A3 66   ¤.aÊ..£f À.êÉ..£f
>  [0030] C0 13 EA C9 01 E6 08 00   00 00 00 00 00 00 00 10   À.êÉ.æ.. ........
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 53 00 54 00 44   ........ ...S.T.D
>  [0070] 00 53 00 43 00 48 00 4D   00 58 00 2E 00 47 00 44   .S.C.H.M .X...G.D
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=STDSCHMX.GDL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 120
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x78
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2228 of length 124 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=120
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40900
>  smt_wct=15
>  smb_vwv[ 0]=   52 (0x34)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   52 (0x34)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=55
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 50 00 43 00 4C   00 58 00 4C 00 2E 00 44   .\.P.C.L .X.L...D
>  [0030] 00 4C 00 4C 00 00 00                              .L.L... 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCLXL.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCLXL.DLL] -> [W32X86/3/PCLXL.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = PCLXL.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = PCLXL.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c5d68 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 424, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/PCLXL.DLL fname=PCLXL.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=180
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40900
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  112 (0x70)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  112 (0x70)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=125
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 70 00 00   .ýÿ..... .....p..
>  [0010] 00 00 00 00 00 00 B6 1F   D8 1D 04 CA 01 00 A0 8D   ......¶. Ø..Ê.. .
>  [0020] 10 16 62 CA 01 00 B6 1F   D8 1D 04 CA 01 00 B6 1F   ..bÊ..¶. Ø..Ê..¶.
>  [0030] D8 1D 04 CA 01 00 2C 03   00 00 00 00 00 00 00 10   Ø..Ê..,. ........
>  [0040] 00 00 00 00 00 20 00 00   00 12 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 50 00 43 00 4C   ........ ...P.C.L
>  [0070] 00 58 00 4C 00 2E 00 44   00 4C 00 4C 00           .X.L...D .L.L.
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=PCLXL.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 120
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x78
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2229 of length 124 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=120
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40964
>  smt_wct=15
>  smb_vwv[ 0]=   52 (0x34)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   52 (0x34)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=55
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 50 00 43 00 4C   00 58 00 4C 00 2E 00 47   .\.P.C.L .X.L...G
>  [0030] 00 50 00 44 00 00 00                              .P.D... 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCLXL.GPD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCLXL.GPD] -> [W32X86/3/PCLXL.GPD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = PCLXL.GPD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = PCLXL.GPD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5bde78 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCLXL.GPD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:33:09 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 46, uid = 139759, flags = 0, file_id 303:7f5f:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/PCLXL.GPD fname=PCLXL.GPD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=180
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=40964
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  112 (0x70)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  112 (0x70)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=125
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 70 00 00   .ýÿ..... .....p..
>  [0010] 00 00 00 00 00 80 18 65   0C 13 EA C9 01 80 98 D3   .......e ..êÉ...Ó
>  [0020] FA 8B 61 CA 01 80 18 65   0C 13 EA C9 01 80 18 65   ú.aÊ...e ..êÉ...e
>  [0030] 0C 13 EA C9 01 87 28 00   00 00 00 00 00 00 00 10   ..êÉ..(. ........
>  [0040] 00 00 00 00 00 20 00 00   00 12 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 50 00 43 00 4C   ........ ...P.C.L
>  [0070] 00 58 00 4C 00 2E 00 47   00 50 00 44 00           .X.L...G .P.D.
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=PCLXL.GPD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 122
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2230 of length 126 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=122
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41028
>  smt_wct=15
>  smb_vwv[ 0]=   54 (0x36)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   54 (0x36)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 50 00 36 00 46   00 4F 00 4E 00 54 00 2E   .\.P.6.F .O.N.T..
>  [0030] 00 47 00 50 00 44 00 00   00                       .G.P.D.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/P6FONT.GPD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/P6FONT.GPD] -> [W32X86/3/P6FONT.GPD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = P6FONT.GPD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = P6FONT.GPD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5ce180 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/P6FONT.GPD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:33:09 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 47, uid = 139759, flags = 0, file_id 303:7f60:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/P6FONT.GPD fname=P6FONT.GPD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41028
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 80 18 65   0C 13 EA C9 01 80 98 D3   .......e ..êÉ...Ó
>  [0020] FA 8B 61 CA 01 80 18 65   0C 13 EA C9 01 80 18 65   ú.aÊ...e ..êÉ...e
>  [0030] 0C 13 EA C9 01 DD 0C 00   00 00 00 00 00 00 00 10   ..êÉ.Ý.. ........
>  [0040] 00 00 00 00 00 20 00 00   00 14 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 50 00 36 00 46   ........ ...P.6.F
>  [0070] 00 4F 00 4E 00 54 00 2E   00 47 00 50 00 44 00 00   .O.N.T.. .G.P.D..
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=P6FONT.GPD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 116
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x74
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2231 of length 120 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=116
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41092
>  smt_wct=15
>  smb_vwv[ 0]=   48 (0x30)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   48 (0x30)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=51
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 50 00 4A 00 4C   00 2E 00 47 00 50 00 44   .\.P.J.L ...G.P.D
>  [0030] 00 00 00                                          ... 
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PJL.GPD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PJL.GPD] -> [W32X86/3/PJL.GPD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = PJL.GPD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = PJL.GPD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5c7690 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PJL.GPD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:33:09 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 48, uid = 139759, flags = 0, file_id 303:7f61:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/PJL.GPD fname=PJL.GPD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=176
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41092
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  108 (0x6C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  108 (0x6C)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=121
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 6C 00 00   .ýÿ..... .....l..
>  [0010] 00 00 00 00 00 80 18 65   0C 13 EA C9 01 80 98 D3   .......e ..êÉ...Ó
>  [0020] FA 8B 61 CA 01 80 18 65   0C 13 EA C9 01 80 18 65   ú.aÊ...e ..êÉ...e
>  [0030] 0C 13 EA C9 01 84 04 00   00 00 00 00 00 00 00 10   ..êÉ.... ........
>  [0040] 00 00 00 00 00 20 00 00   00 0E 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 50 00 4A 00 4C   ........ ...P.J.L
>  [0070] 00 2E 00 47 00 50 00 44   00                       ...G.P.D .
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=PJL.GPD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 122
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7a
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2232 of length 126 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=122
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41156
>  smt_wct=15
>  smb_vwv[ 0]=   54 (0x36)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   54 (0x36)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=57
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 50 00 36 00 44   00 49 00 53 00 50 00 2E   .\.P.6.D .I.S.P..
>  [0030] 00 47 00 50 00 44 00 00   00                       .G.P.D.. .
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/P6DISP.GPD"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/P6DISP.GPD] -> [W32X86/3/P6DISP.GPD]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = P6DISP.GPD
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = P6DISP.GPD, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5ac198 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/P6DISP.GPD
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:33:09 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 49, uid = 139759, flags = 0, file_id 303:7f62:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/P6DISP.GPD fname=P6DISP.GPD
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=184
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41156
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  116 (0x74)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  116 (0x74)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=129
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 74 00 00   .ýÿ..... .....t..
>  [0010] 00 00 00 00 00 80 18 65   0C 13 EA C9 01 80 98 D3   .......e ..êÉ...Ó
>  [0020] FA 8B 61 CA 01 80 18 65   0C 13 EA C9 01 80 18 65   ú.aÊ...e ..êÉ...e
>  [0030] 0C 13 EA C9 01 91 63 00   00 00 00 00 00 00 00 10   ..êÉ..c. ........
>  [0040] 00 00 00 00 00 20 00 00   00 14 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 50 00 36 00 44   ........ ...P.6.D
>  [0070] 00 49 00 53 00 50 00 2E   00 47 00 50 00 44 00 00   .I.S.P.. .G.P.D..
>  [0080] 00                                                . 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=P6DISP.GPD directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 126
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x7e
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2233 of length 130 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=126
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41220
>  smt_wct=15
>  smb_vwv[ 0]=   58 (0x3A)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   58 (0x3A)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=61
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 57 00 33 00 32 00 58   00 38 00 36 00 5C 00 33   .W.3.2.X .8.6.\.3
>  [0020] 00 5C 00 50 00 43 00 4C   00 35 00 45 00 52 00 45   .\.P.C.L .5.E.R.E
>  [0030] 00 53 00 2E 00 44 00 4C   00 4C 00 00 00           .S...D.L .L...
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans2 (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/11/10 09:57:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "W32X86/3/PCL5ERES.DLL"
>[2009/11/10 09:57:04, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [W32X86/3/PCL5ERES.DLL] -> [W32X86/3/PCL5ERES.DLL]
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=W32X86/3, mask = PCL5ERES.DLL
>[2009/11/10 09:57:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=W32X86/3
>[2009/11/10 09:57:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path W32X86/3, expect_close = 1
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = PCL5ERES.DLL, attr = 22
>[2009/11/10 09:57:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<W32X86/3> dontdescend=<>
>[2009/11/10 09:57:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0xa5b91d0 now at offset -1
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:474(dos_mode)
>  dos_mode: W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning a
>[2009/11/10 09:57:04,  8] smbd/dosmode.c:521(dos_mode)
>  dos_mode returning a
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 427, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found W32X86/3/PCL5ERES.DLL fname=PCL5ERES.DLL
>[2009/11/10 09:57:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/11/10 09:57:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/11/10 09:57:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/11/10 09:57:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 131010
>[2009/11/10 09:57:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=41220
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=133
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 01 00 01 00 00   00 00 00 00 00 78 00 00   .ýÿ..... .....x..
>  [0010] 00 00 00 00 00 80 E0 1A   81 1F 04 CA 01 00 A0 8D   ......à. ...Ê.. .
>  [0020] 10 16 62 CA 01 80 E0 1A   81 1F 04 CA 01 80 E0 1A   ..bÊ..à. ...Ê..à.
>  [0030] 81 1F 04 CA 01 00 24 10   00 00 00 00 00 00 00 20   ...Ê..$. ....... 
>  [0040] 00 00 00 00 00 20 00 00   00 18 00 00 00 00 00 00   ..... .. ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 50 00 43 00 4C   ........ ...P.C.L
>  [0070] 00 35 00 45 00 52 00 45   00 53 00 2E 00 44 00 4C   .5.E.R.E .S...D.L
>  [0080] 00 4C 00 00 00                                    .L... 
>[2009/11/10 09:57:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=PCL5ERES.DLL directory=W32X86/3 dirtype=22 numentries=1
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2234 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41284
>  smt_wct=3
>  smb_vwv[ 0]= 5088 (0x13E0)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=72 fnum=5088 (numopen=65)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000287F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:17 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 332, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 358, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:16:17 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 332, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 358, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000287F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/UNIDRV.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/UNIDRV.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/UNIDRV.DLL (numopen=64) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5088 (69 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41284
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2235 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41348
>  smt_wct=3
>  smb_vwv[ 0]= 5062 (0x13C6)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=31 fnum=5062 (numopen=64)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000287F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:17 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 332, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 358, uid = 139759, flags = 0, file_id 303:7f28:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000287F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/UNIDRV.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/UNIDRV.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/UNIDRV.DLL (numopen=63) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5062 (68 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41348
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2236 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41412
>  smt_wct=3
>  smb_vwv[ 0]= 5091 (0x13E3)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=73 fnum=5091 (numopen=63)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000002A7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:02 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 333, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 361, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:16:02 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 333, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 361, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000002A7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/UNIDRVUI.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/UNIDRVUI.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/UNIDRVUI.DLL (numopen=62) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5091 (67 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41412
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2237 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41476
>  smt_wct=3
>  smb_vwv[ 0]= 5063 (0x13C7)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=32 fnum=5063 (numopen=62)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000002A7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:02 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 333, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 361, uid = 139759, flags = 0, file_id 303:7f2a:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000002A7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/UNIDRVUI.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/UNIDRVUI.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/UNIDRVUI.DLL (numopen=61) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5063 (66 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41476
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2238 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41540
>  smt_wct=3
>  smb_vwv[ 0]= 5094 (0x13E6)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=74 fnum=5094 (numopen=61)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000527F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:59 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 334, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 364, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:59 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 334, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 364, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000527F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZEVWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZEVWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZEVWN7.DLL (numopen=60) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5094 (65 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41540
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2239 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41604
>  smt_wct=3
>  smb_vwv[ 0]= 5064 (0x13C8)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=35 fnum=5064 (numopen=60)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000527F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:59 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 334, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 364, uid = 139759, flags = 0, file_id 303:7f52:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000527F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZEVWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZEVWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZEVWN7.DLL (numopen=59) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5064 (64 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41604
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2240 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41668
>  smt_wct=3
>  smb_vwv[ 0]= 5097 (0x13E9)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=75 fnum=5097 (numopen=59)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000537F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:05:45 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 335, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 367, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:05:45 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 335, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 367, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000537F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZSTWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZSTWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZSTWN7.DLL (numopen=58) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5097 (63 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41668
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2241 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41732
>  smt_wct=3
>  smb_vwv[ 0]= 5065 (0x13C9)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=36 fnum=5065 (numopen=58)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000537F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:05:45 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 335, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 367, uid = 139759, flags = 0, file_id 303:7f53:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000537F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZSTWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZSTWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZSTWN7.DLL (numopen=57) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5065 (62 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41732
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2242 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41796
>  smt_wct=3
>  smb_vwv[ 0]= 5100 (0x13EC)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=76 fnum=5100 (numopen=57)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000547F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 336, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 370, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 336, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 370, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000547F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZUIWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZUIWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZUIWN7.DLL (numopen=56) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5100 (61 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41796
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2243 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41860
>  smt_wct=3
>  smb_vwv[ 0]= 5066 (0x13CA)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=37 fnum=5066 (numopen=56)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000547F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 336, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 370, uid = 139759, flags = 0, file_id 303:7f54:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000547F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZUIWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZUIWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZUIWN7.DLL (numopen=55) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5066 (60 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41860
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2244 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41924
>  smt_wct=3
>  smb_vwv[ 0]= 5103 (0x13EF)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=77 fnum=5103 (numopen=55)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000557F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 337, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 373, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 337, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 373, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000557F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZ6RWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZ6RWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZ6RWN7.DLL (numopen=54) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5103 (59 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41924
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2245 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41988
>  smt_wct=3
>  smb_vwv[ 0]= 5067 (0x13CB)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=38 fnum=5067 (numopen=54)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000557F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 337, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 373, uid = 139759, flags = 0, file_id 303:7f55:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000557F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZ6RWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZ6RWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZ6RWN7.DLL (numopen=53) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5067 (58 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=41988
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2246 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42052
>  smt_wct=3
>  smb_vwv[ 0]= 5106 (0x13F2)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=78 fnum=5106 (numopen=53)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000002F7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 22 Jun 2009 06:58:10 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 338, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 376, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 22 Jun 2009 06:58:10 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 338, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 376, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000002F7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPCDMCLH.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPCDMCLH.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPCDMCLH.DLL (numopen=52) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5106 (57 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42052
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2247 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42116
>  smt_wct=3
>  smb_vwv[ 0]= 5068 (0x13CC)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=44 fnum=5068 (numopen=52)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000002F7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 22 Jun 2009 06:58:10 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 338, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 376, uid = 139759, flags = 0, file_id 303:7f2f:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000002F7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPCDMCLH.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPCDMCLH.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPCDMCLH.DLL (numopen=51) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5068 (56 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42116
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2248 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42180
>  smt_wct=3
>  smb_vwv[ 0]= 5109 (0x13F5)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=79 fnum=5109 (numopen=51)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005C7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 339, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 379, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 339, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 379, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005C7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZLSWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZLSWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZLSWN7.DLL (numopen=50) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5109 (55 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42180
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2249 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42244
>  smt_wct=3
>  smb_vwv[ 0]= 5069 (0x13CD)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=46 fnum=5069 (numopen=50)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005C7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:16:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 339, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 379, uid = 139759, flags = 0, file_id 303:7f5c:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005C7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZLSWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZLSWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZLSWN7.DLL (numopen=49) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5069 (54 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42244
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2250 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42308
>  smt_wct=3
>  smb_vwv[ 0]= 5112 (0x13F8)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-114069156-2663528578-1345302127-280518
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-114069156-2663528578-1345302127-280518
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-123
>  SID[  6]: S-1-22-1-139759
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/11/10 09:57:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 139759
>  Primary group is 1001 and contains 2 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 123
>[2009/11/10 09:57:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,139759) gid=(0,1001)
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=80 fnum=5112 (numopen=49)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005D7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d90
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:05:44 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 340, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 382, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:05:44 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 340, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 382, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005D7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZSSWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZSSWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZSSWN7.DLL (numopen=48) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5112 (53 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42308
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2251 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42372
>  smt_wct=3
>  smb_vwv[ 0]= 5070 (0x13CE)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=47 fnum=5070 (numopen=48)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005D7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:05:44 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 340, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 382, uid = 139759, flags = 0, file_id 303:7f5d:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005D7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZSSWN7.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZSSWN7.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZSSWN7.DLL (numopen=47) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5070 (52 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42372
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2252 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42436
>  smt_wct=3
>  smb_vwv[ 0]= 5115 (0x13FB)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=81 fnum=5115 (numopen=47)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:24 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 341, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 385, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:24 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 341, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 385, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003E7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBMIAPI.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBMIAPI.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBMIAPI.DLL (numopen=46) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5115 (51 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42436
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2253 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42500
>  smt_wct=3
>  smb_vwv[ 0]= 5071 (0x13CF)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=48 fnum=5071 (numopen=46)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:24 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 341, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 385, uid = 139759, flags = 0, file_id 303:7f3e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003E7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBMIAPI.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBMIAPI.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBMIAPI.DLL (numopen=45) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5071 (50 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42500
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2254 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42564
>  smt_wct=3
>  smb_vwv[ 0]= 5118 (0x13FE)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=82 fnum=5118 (numopen=45)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003F7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 22 Jun 2009 06:58:08 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 342, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 388, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 22 Jun 2009 06:58:08 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 342, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 388, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003F7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBMINI.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBMINI.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBMINI.DLL (numopen=44) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5118 (49 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42564
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2255 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42628
>  smt_wct=3
>  smb_vwv[ 0]= 5072 (0x13D0)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=49 fnum=5072 (numopen=44)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003F7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 22 Jun 2009 06:58:08 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 342, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 388, uid = 139759, flags = 0, file_id 303:7f3f:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003F7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBMINI.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBMINI.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBMINI.DLL (numopen=43) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5072 (48 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42628
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2256 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42692
>  smt_wct=3
>  smb_vwv[ 0]= 4927 (0x133F)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=83 fnum=4927 (numopen=43)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000407F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 343, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 391, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 343, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 391, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000407F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBOID.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBOID.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBOID.DLL (numopen=42) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4927 (47 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42692
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2257 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42756
>  smt_wct=3
>  smb_vwv[ 0]= 5073 (0x13D1)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=50 fnum=5073 (numopen=42)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000407F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 343, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 391, uid = 139759, flags = 0, file_id 303:7f40:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000407F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBOID.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBOID.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBOID.DLL (numopen=41) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5073 (46 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42756
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2258 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42820
>  smt_wct=3
>  smb_vwv[ 0]= 4936 (0x1348)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=84 fnum=4936 (numopen=41)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000417F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 344, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 394, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 344, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 394, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000417F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBOIDPS.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBOIDPS.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBOIDPS.DLL (numopen=40) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4936 (45 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42820
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2259 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42884
>  smt_wct=3
>  smb_vwv[ 0]= 5074 (0x13D2)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=51 fnum=5074 (numopen=40)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000417F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 344, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 394, uid = 139759, flags = 0, file_id 303:7f41:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000417F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBOIDPS.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBOIDPS.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBOIDPS.DLL (numopen=39) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5074 (44 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42884
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2260 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42948
>  smt_wct=3
>  smb_vwv[ 0]= 4939 (0x134B)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=85 fnum=4939 (numopen=39)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000427F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 345, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 397, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 345, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 397, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000427F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBPRO.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBPRO.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBPRO.DLL (numopen=38) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4939 (43 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=42948
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2261 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43012
>  smt_wct=3
>  smb_vwv[ 0]= 5075 (0x13D3)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=52 fnum=5075 (numopen=38)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000427F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 345, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 397, uid = 139759, flags = 0, file_id 303:7f42:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000427F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBPRO.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBPRO.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBPRO.DLL (numopen=37) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5075 (42 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43012
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2262 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43076
>  smt_wct=3
>  smb_vwv[ 0]= 4942 (0x134E)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=86 fnum=4942 (numopen=37)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000437F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 346, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 400, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 346, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 400, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000437F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBPROPS.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBPROPS.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBPROPS.DLL (numopen=36) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4942 (41 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43076
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2263 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43140
>  smt_wct=3
>  smb_vwv[ 0]= 5076 (0x13D4)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=53 fnum=5076 (numopen=36)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000437F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:25 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 346, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 400, uid = 139759, flags = 0, file_id 303:7f43:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000437F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPBPROPS.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPBPROPS.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPBPROPS.DLL (numopen=35) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5076 (40 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43140
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2264 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43204
>  smt_wct=3
>  smb_vwv[ 0]= 4946 (0x1352)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=87 fnum=4946 (numopen=35)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000387F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 347, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 403, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 347, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 403, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000387F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIDR12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIDR12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIDR12.DLL (numopen=34) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4946 (39 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43204
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2265 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43268
>  smt_wct=3
>  smb_vwv[ 0]= 5077 (0x13D5)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=55 fnum=5077 (numopen=34)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000387F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 347, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 403, uid = 139759, flags = 0, file_id 303:7f38:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000387F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIDR12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIDR12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIDR12.DLL (numopen=33) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5077 (38 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43268
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2266 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43332
>  smt_wct=3
>  smb_vwv[ 0]= 4949 (0x1355)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=88 fnum=4949 (numopen=33)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000397F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 348, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 406, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 348, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 406, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000397F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZINW12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZINW12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZINW12.DLL (numopen=32) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4949 (37 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43332
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2267 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43396
>  smt_wct=3
>  smb_vwv[ 0]= 5078 (0x13D6)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=56 fnum=5078 (numopen=32)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000397F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 348, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 406, uid = 139759, flags = 0, file_id 303:7f39:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000397F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZINW12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZINW12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZINW12.DLL (numopen=31) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5078 (36 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43396
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2268 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43460
>  smt_wct=3
>  smb_vwv[ 0]= 4962 (0x1362)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=89 fnum=4962 (numopen=31)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003A7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 349, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 409, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 349, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 409, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003A7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIPM12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIPM12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIPM12.DLL (numopen=30) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4962 (35 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43460
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2269 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43524
>  smt_wct=3
>  smb_vwv[ 0]= 5079 (0x13D7)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=57 fnum=5079 (numopen=30)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003A7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 349, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 409, uid = 139759, flags = 0, file_id 303:7f3a:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003A7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIPM12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIPM12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIPM12.DLL (numopen=29) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5079 (34 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43524
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2270 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43588
>  smt_wct=3
>  smb_vwv[ 0]= 4965 (0x1365)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=90 fnum=4965 (numopen=29)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003B7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 350, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 412, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 350, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 412, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003B7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIPR12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIPR12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIPR12.DLL (numopen=28) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4965 (33 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43588
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2271 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43652
>  smt_wct=3
>  smb_vwv[ 0]= 5080 (0x13D8)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=58 fnum=5080 (numopen=28)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003B7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 350, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 412, uid = 139759, flags = 0, file_id 303:7f3b:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003B7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIPR12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIPR12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIPR12.DLL (numopen=27) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5080 (32 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43652
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2272 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43716
>  smt_wct=3
>  smb_vwv[ 0]= 4968 (0x1368)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=91 fnum=4968 (numopen=27)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003C7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 351, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 415, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 351, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 415, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003C7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIPT12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIPT12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIPT12.DLL (numopen=26) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4968 (31 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43716
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2273 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43780
>  smt_wct=3
>  smb_vwv[ 0]= 5081 (0x13D9)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=59 fnum=5081 (numopen=26)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003C7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 351, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 415, uid = 139759, flags = 0, file_id 303:7f3c:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003C7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZIPT12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZIPT12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZIPT12.DLL (numopen=25) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5081 (30 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43780
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2274 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43844
>  smt_wct=3
>  smb_vwv[ 0]= 4971 (0x136B)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=92 fnum=4971 (numopen=25)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003D7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 352, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 418, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 352, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 418, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003D7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZISN12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZISN12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZISN12.DLL (numopen=24) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4971 (29 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43844
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2275 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43908
>  smt_wct=3
>  smb_vwv[ 0]= 5082 (0x13DA)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=60 fnum=5082 (numopen=24)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000003D7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:15:26 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 352, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 418, uid = 139759, flags = 0, file_id 303:7f3d:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000003D7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZISN12.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZISN12.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZISN12.DLL (numopen=23) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5082 (28 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43908
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2276 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43972
>  smt_wct=3
>  smb_vwv[ 0]= 4974 (0x136E)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=93 fnum=4974 (numopen=23)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000457F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:52 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 353, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 421, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:52 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 353, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 421, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000457F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/UNIRES.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/UNIRES.DLL (numopen=22) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4974 (27 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=43972
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2277 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44036
>  smt_wct=3
>  smb_vwv[ 0]= 5083 (0x13DB)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=61 fnum=5083 (numopen=22)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000457F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:52 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 353, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 421, uid = 139759, flags = 0, file_id 303:7f45:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000457F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/UNIRES.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/UNIRES.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/UNIRES.DLL (numopen=21) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5083 (26 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44036
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2278 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44100
>  smt_wct=3
>  smb_vwv[ 0]= 4977 (0x1371)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=94 fnum=4977 (numopen=21)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 424, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 424, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/PCLXL.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/PCLXL.DLL (numopen=20) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4977 (25 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44100
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2279 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44164
>  smt_wct=3
>  smb_vwv[ 0]= 5084 (0x13DC)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=66 fnum=5084 (numopen=20)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 08:55:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 354, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 424, uid = 139759, flags = 0, file_id 303:7f5e:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005E7F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/PCLXL.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/PCLXL.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/PCLXL.DLL (numopen=19) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5084 (24 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44164
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2280 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44228
>  smt_wct=3
>  smb_vwv[ 0]= 4980 (0x1374)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=95 fnum=4980 (numopen=19)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x0, gen_id = 427, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 427, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/PCL5ERES.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/PCL5ERES.DLL (numopen=18) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 4980 (23 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44228
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2281 of length 45 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44292
>  smt_wct=3
>  smb_vwv[ 0]= 5085 (0x13DD)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/reply.c:4483(reply_close)
>  close fd=71 fnum=5085 (numopen=18)
>[2009/11/10 09:57:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa667d20
>[2009/11/10 09:57:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Mon 13 Jul 2009 09:07:49 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 2
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x10, gen_id = 355, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12289, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, mid = 0x0, type= 0x40, gen_id = 427, uid = 139759, flags = 0, file_id 303:7f63:0
>[2009/11/10 09:57:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000637F
>[2009/11/10 09:57:04, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/PCL5ERES.DLL = 0
>[2009/11/10 09:57:04, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/PCL5ERES.DLL
>[2009/11/10 09:57:04,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/PCL5ERES.DLL (numopen=17) NT_STATUS_OK
>[2009/11/10 09:57:04,  5] smbd/files.c:476(file_free)
>  freed files structure 5085 (22 used)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44292
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 2192
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x890
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2282 of length 2196 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=2192
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44356
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2108 (0x83C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]= 2108 (0x83C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=2125
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 3C 08 00 00 09 00 00   ........ .<......
>  [0020] 00 24 08 00 00 00 00 08   00 00 00 00 00 0C 00 00   .$...... ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00 00 00 00   .....ùJ? ..0.....
>  [0040] 00 00 00 02 00 00 08 00   00 90 62 97 01 30 24 31   ........ ..b..0$1
>  [0050] 00 00 00 00 00 00 00 00   00 AA AD 97 01 D6 AD 97   ........ .ª..Ö.
>  [0060] 01 D8 AD 97 01 DA AD 97   01 B6 AE 97 01 B8 AE 97   .Ø..Ú. .¶®..¸®.
>  [0070] 01 CA AE 97 01 D2 AE 97   01 D4 AE 97 01 48 18 00   .Ê®..Ò®. .Ô®..H..
>  [0080] 00 01 00 00 00 01 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 5C 00 5C   ........ .....\.\
>  [00A0] 00 64 00 61 00 73 00 74   00 61 00 72 00 64 00 6C   .d.a.s.t .a.r.d.l
>  [00B0] 00 79 00 2E 00 70 00 61   00 6E 00 69 00 63 00 2E   .y...p.a .n.i.c..
>  [00C0] 00 75 00 6E 00 63 00 2E   00 65 00 64 00 75 00 00   .u.n.c.. .e.d.u..
>  [00D0] 00 5C 00 5C 00 64 00 61   00 73 00 74 00 61 00 72   .\.\.d.a .s.t.a.r
>  [00E0] 00 64 00 6C 00 79 00 2E   00 70 00 61 00 6E 00 69   .d.l.y.. .p.a.n.i
>  [00F0] 00 63 00 2E 00 75 00 6E   00 63 00 2E 00 65 00 64   .c...u.n .c...e.d
>  [0100] 00 75 00 5C 00 6C 00 69   00 62 00 72 00 61 00 00   .u.\.l.i .b.r.a..
>  [0110] 00 6C 00 69 00 62 00 72   00 61 00 00 00 53 00 61   .l.i.b.r .a...S.a
>  [0120] 00 6D 00 62 00 61 00 20   00 50 00 72 00 69 00 6E   .m.b.a.  .P.r.i.n
>  [0130] 00 74 00 65 00 72 00 20   00 50 00 6F 00 72 00 74   .t.e.r.  .P.o.r.t
>  [0140] 00 00 00 48 00 50 00 20   00 4C 00 61 00 73 00 65   ...H.P.  .L.a.s.e
>  [0150] 00 72 00 4A 00 65 00 74   00 20 00 34 00 32 00 35   .r.J.e.t . .4.2.5
>  [0160] 00 30 00 20 00 50 00 43   00 4C 00 36 00 00 00 00   .0. .P.C .L.6....
>  [0170] 00 00 00 5C 00 5C 00 64   00 61 00 73 00 74 00 61   ...\.\.d .a.s.t.a
>  [0180] 00 72 00 64 00 6C 00 79   00 2E 00 70 00 61 00 6E   .r.d.l.y ...p.a.n
>  [0190] 00 69 00 63 00 2E 00 75   00 6E 00 63 00 2E 00 65   .i.c...u .n.c...e
>  [01A0] 00 64 00 75 00 5C 00 6C   00 69 00 62 00 72 00 61   .d.u.\.l .i.b.r.a
>  [01B0] 00 00 00 01 04 00 04 DC   00 00 00 13 47 01 00 01   .......Ü ....G...
>  [01C0] 00 01 00 00 00 00 00 64   00 01 00 0F 00 FC FF 01   .......d .....üÿ.
>  [01D0] 00 01 00 00 00 03 00 00   00 4C 00 65 00 74 00 74   ........ .L.e.t.t
>  [01E0] 00 65 00 72 00 00 00 00   00 00 00 00 00 00 00 00   .e.r.... ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-114069156-2663528578-1345302127-280518
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-114069156-2663528578-1345302127-280518
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-123
>  SID[  6]: S-1-22-1-139759
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/11/10 09:57:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 139759
>  Primary group is 1001 and contains 2 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 123
>[2009/11/10 09:57:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,139759) gid=(0,1001)
>[2009/11/10 09:57:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/11/10 09:57:04,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=2108 params=0 setup=2
>[2009/11/10 09:57:04,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:04,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:04,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:04,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:04, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 2108, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 2092
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 083c
>      000a auth_len  : 0000
>      000c call_id   : 00000009
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 2092, incoming data = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000824
>      0004 context_id: 0000
>      0006 opnum     : 0008
>[2009/11/10 09:57:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:04,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x8 - api_rpcTNP: rpc command: SPOOLSS_GETPRINTER
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[8].fn == 0x82af5f0
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinter: struct spoolss_GetPrinter
>          in: struct spoolss_GetPrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>              level                    : 0x00000000 (0)
>              buffer                   : *
>                  buffer                   : DATA_BLOB length=2048
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 90 62 97 01 30 24 31 00   00 00 00 00 00 00 00 00   .b..0$1. ........
>  [0010] AA AD 97 01 D6 AD 97 01   D8 AD 97 01 DA AD 97 01   ª..Ö.. Ø..Ú..
>  [0020] B6 AE 97 01 B8 AE 97 01   CA AE 97 01 D2 AE 97 01   ¶®..¸®.. Ê®..Ò®..
>  [0030] D4 AE 97 01 48 18 00 00   01 00 00 00 01 00 00 00   Ô®..H... ........
>  [0040] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0050] 00 00 00 00 5C 00 5C 00   64 00 61 00 73 00 74 00   ....\.\. d.a.s.t.
>  [0060] 61 00 72 00 64 00 6C 00   79 00 2E 00 70 00 61 00   a.r.d.l. y...p.a.
>  [0070] 6E 00 69 00 63 00 2E 00   75 00 6E 00 63 00 2E 00   n.i.c... u.n.c...
>  [0080] 65 00 64 00 75 00 00 00   5C 00 5C 00 64 00 61 00   e.d.u... \.\.d.a.
>  [0090] 73 00 74 00 61 00 72 00   64 00 6C 00 79 00 2E 00   s.t.a.r. d.l.y...
>  [00A0] 70 00 61 00 6E 00 69 00   63 00 2E 00 75 00 6E 00   p.a.n.i. c...u.n.
>  [00B0] 63 00 2E 00 65 00 64 00   75 00 5C 00 6C 00 69 00   c...e.d. u.\.l.i.
>  [00C0] 62 00 72 00 61 00 00 00   6C 00 69 00 62 00 72 00   b.r.a... l.i.b.r.
>  [00D0] 61 00 00 00 53 00 61 00   6D 00 62 00 61 00 20 00   a...S.a. m.b.a. .
>  [00E0] 50 00 72 00 69 00 6E 00   74 00 65 00 72 00 20 00   P.r.i.n. t.e.r. .
>  [00F0] 50 00 6F 00 72 00 74 00   00 00 48 00 50 00 20 00   P.o.r.t. ..H.P. .
>  [0100] 4C 00 61 00 73 00 65 00   72 00 4A 00 65 00 74 00   L.a.s.e. r.J.e.t.
>  [0110] 20 00 34 00 32 00 35 00   30 00 20 00 50 00 43 00    .4.2.5. 0. .P.C.
>  [0120] 4C 00 36 00 00 00 00 00   00 00 5C 00 5C 00 64 00   L.6..... ..\.\.d.
>  [0130] 61 00 73 00 74 00 61 00   72 00 64 00 6C 00 79 00   a.s.t.a. r.d.l.y.
>  [0140] 2E 00 70 00 61 00 6E 00   69 00 63 00 2E 00 75 00   ..p.a.n. i.c...u.
>  [0150] 6E 00 63 00 2E 00 65 00   64 00 75 00 5C 00 6C 00   n.c...e. d.u.\.l.
>  [0160] 69 00 62 00 72 00 61 00   00 00 01 04 00 04 DC 00   i.b.r.a. ......Ü.
>  [0170] 00 00 13 47 01 00 01 00   01 00 00 00 00 00 64 00   ...G.... ......d.
>  [0180] 01 00 0F 00 FC FF 01 00   01 00 00 00 03 00 00 00   ....üÿ.. ........
>  [0190] 4C 00 65 00 74 00 74 00   65 00 72 00 00 00 00 00   L.e.t.t. e.r.....
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0200] 00 00 00 00 00 00 00 00   77 00 69 00 6E 00 70 00   ........ w.i.n.p.
>  [0210] 72 00 69 00 6E 00 74 00   00 00 52 00 41 00 57 00   r.i.n.t. ..R.A.W.
>  [0220] 00 00 00 00 01 00 04 80   14 00 00 00 24 00 00 00   ........ ....$...
>  [0230] 00 00 00 00 34 00 00 00   01 02 00 00 00 00 00 05   ....4... ........
>  [0240] 20 00 00 00 20 02 00 00   01 02 00 00 00 00 00 05    ... ... ........
>  [0250] 20 00 00 00 20 02 00 00   02 00 4C 00 03 00 00 00    ... ... ..L.....
>  [0260] 00 02 14 00 08 00 02 20   01 01 00 00 00 00 00 01   .......  ........
>  [0270] 00 00 00 00 00 09 18 00   0C 00 0F 10 01 02 00 00   ........ ........
>  [0280] 00 00 00 05 20 00 00 00   20 02 00 00 00 02 18 00   .... ...  .......
>  [0290] 0C 00 0F 10 01 02 00 00   00 00 00 05 20 00 00 00   ........ .... ...
>  [02A0] 20 02 00 00 00 00 00 00   00 00 00 00 00 00 00 00    ....... ........
>  [02B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0300] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0310] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0320] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0330] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0340] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0350] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0360] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0370] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0380] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0390] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0400] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0410] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0420] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0430] 00 00 00 00 00 00 00 00   C8 01 2B 6D 00 00 00 00   ........ È.+m....
>  [0440] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0450] 76 00 00 76 0B D5 02 00   40 36 97 01 C8 47 97 01   v..v.Õ.. @6..ÈG..
>  [0460] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0470] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0480] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0490] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0500] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0510] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0520] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0530] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0540] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0550] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0560] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0570] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0580] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0590] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0600] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0610] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0620] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0630] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0640] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0650] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0660] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0670] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0680] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0690] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0700] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0710] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0720] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0730] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0740] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0750] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0760] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0770] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0780] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0790] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>              offered                  : 0x00000800 (2048)
>[2009/11/10 09:57:04,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:04,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:04,  4] rpc_server/srv_spoolss_nt.c:377(get_printer_snum)
>  short name:libra
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:04,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:04,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:04,  4] printing/printing.c:1085(print_cache_expired)
>  print_cache_expired: cache expired for queue libra (last_qscan_time = 1257865022, time now = 1257865024, qcachetime = 2)
>[2009/11/10 09:57:04, 10] printing/printing.c:1577(print_queue_update)
>  print_queue_update: Sending message -> printer = libra, type = 6, lpq command = [/usr/bin/lpq -Plibra_smb] lprm command = [/usr/bin/lprm -Plibra_smb %j]
>[2009/11/10 09:57:04, 10] lib/messages_local.c:237(messaging_tdb_store)
>  messaging_tdb_store:
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       array: struct messaging_array
>          num_messages             : 0x00000001 (1)
>          messages: ARRAY(1)
>              messages: struct messaging_rec
>                  msg_version              : 0x00000002 (2)
>                  msg_type                 : MSG_PRINTER_UPDATE (517)
>                  dest: struct server_id
>                      id                       : 0x00002ff9 (12281)
>                      vnn                      : 0xffffffff (4294967295)
>                  src: struct server_id
>                      id                       : 0x00003001 (12289)
>                      vnn                      : 0xffffffff (4294967295)
>                  buf                      : DATA_BLOB length=64
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 6C 69 62 72 61 00 06 00   00 00 2F 75 73 72 2F 62   libra... ../usr/b
>  [0010] 69 6E 2F 6C 70 71 20 2D   50 6C 69 62 72 61 5F 73   in/lpq - Plibra_s
>  [0020] 6D 62 00 2F 75 73 72 2F   62 69 6E 2F 6C 70 72 6D   mb./usr/ bin/lprm
>  [0030] 20 2D 50 6C 69 62 72 61   5F 73 6D 62 20 25 6A 00    -Plibra _smb %j.
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:719(get_c_setprinter)
>  get_c_setprinter: c_setprinter = 2
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinter: struct spoolss_GetPrinter
>          out: struct spoolss_GetPrinter
>              info                     : *
>                  info                     : union spoolss_PrinterInfo(case 0)
>                  info0: struct spoolss_PrinterInfo0
>                      printername              : *
>                          printername              : '\\dastardly.panic.unc.edu\libra'
>                      servername               : *
>                          servername               : '\\dastardly.panic.unc.edu'
>                      cjobs                    : 0x00000000 (0)
>                      total_jobs               : 0x00000000 (0)
>                      total_bytes              : 0x00000000 (0)
>                      time: struct spoolss_Time
>                          year                     : 0x07d9 (2009)
>                          month                    : 0x000b (11)
>                          day_of_week              : 0x0001 (1)
>                          day                      : 0x0009 (9)
>                          hour                     : 0x0012 (18)
>                          minute                   : 0x0020 (32)
>                          second                   : 0x0037 (55)
>                          millisecond              : 0x0000 (0)
>                      global_counter           : 0x00000004 (4)
>                      total_pages              : 0x00000000 (0)
>                      version                  : 0x00000005 (5)
>                      free_build               : 0x00000893 (2195)
>                      spooling                 : 0x00000000 (0)
>                      max_spooling             : 0x00000000 (0)
>                      session_counter          : 0x00000004 (4)
>                      num_error_out_of_paper   : 0x00000000 (0)
>                      num_error_not_ready      : 0x00000000 (0)
>                      job_error                : 0x00000000 (0)
>                             0: JOB_STATUS_PAUSED        
>                             0: JOB_STATUS_ERROR         
>                             0: JOB_STATUS_DELETING      
>                             0: JOB_STATUS_SPOOLING      
>                             0: JOB_STATUS_PRINTING      
>                             0: JOB_STATUS_OFFLINE       
>                             0: JOB_STATUS_PAPEROUT      
>                             0: JOB_STATUS_PRINTED       
>                             0: JOB_STATUS_DELETED       
>                             0: JOB_STATUS_BLOCKED_DEVQ  
>                             0: JOB_STATUS_USER_INTERVENTION
>                             0: JOB_STATUS_RESTART       
>                             0: JOB_STATUS_COMPLETE      
>                      number_of_processors     : 0x00000001 (1)
>                      processor_type           : PROCESSOR_INTEL_PENTIUM (586)
>                      high_part_total_bytes    : 0x00000000 (0)
>                      change_id                : 0x0f8ef36e (261026670)
>                      last_error               : WERR_OK
>                      status                   : 0x00000000 (0)
>                             0: PRINTER_STATUS_PAUSED    
>                             0: PRINTER_STATUS_ERROR     
>                             0: PRINTER_STATUS_PENDING_DELETION
>                             0: PRINTER_STATUS_PAPER_JAM 
>                             0: PRINTER_STATUS_PAPER_OUT 
>                             0: PRINTER_STATUS_MANUAL_FEED
>                             0: PRINTER_STATUS_PAPER_PROBLEM
>                             0: PRINTER_STATUS_OFFLINE   
>                             0: PRINTER_STATUS_IO_ACTIVE 
>                             0: PRINTER_STATUS_BUSY      
>                             0: PRINTER_STATUS_PRINTING  
>                             0: PRINTER_STATUS_OUTPUT_BIN_FULL
>                             0: PRINTER_STATUS_NOT_AVAILABLE
>                             0: PRINTER_STATUS_WAITING   
>                             0: PRINTER_STATUS_PROCESSING
>                             0: PRINTER_STATUS_INITIALIZING
>                             0: PRINTER_STATUS_WARMING_UP
>                             0: PRINTER_STATUS_TONER_LOW 
>                             0: PRINTER_STATUS_NO_TONER  
>                             0: PRINTER_STATUS_PAGE_PUNT 
>                             0: PRINTER_STATUS_USER_INTERVENTION
>                             0: PRINTER_STATUS_OUT_OF_MEMORY
>                             0: PRINTER_STATUS_DOOR_OPEN 
>                             0: PRINTER_STATUS_SERVER_UNKNOWN
>                             0: PRINTER_STATUS_POWER_SAVE
>                      enumerate_network_printers: 0x00000000 (0)
>                      c_setprinter             : 0x00000002 (2)
>                      processor_architecture   : PROCESSOR_ARCHITECTURE_INTEL (0)
>                      processor_level          : 0x0006 (6)
>                      ref_ic                   : 0x00000000 (0)
>                      reserved2                : 0x00000000 (0)
>                      reserved3                : 0x00000000 (0)
>              needed                   : *
>                  needed                   : 0x000000f0 (240)
>              result                   : WERR_OK
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 58
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 2092
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa668ea0
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa668ea0
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 2064.
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0828
>      000a auth_len  : 0000
>      000c call_id   : 00000009
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000810
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:04,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..2088] (align 0)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=2144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44356
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2088 (0x828)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 2088 (0x828)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=2089
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 28 08 00 00 09 00 00   ........ .(......
>  [0010] 00 10 08 00 00 00 00 00   00 00 00 02 00 00 08 00   ........ ........
>  [0020] 00 7C 00 00 00 BC 00 00   00 00 00 00 00 00 00 00   .|...¼.. ........
>  [0030] 00 00 00 00 00 D9 07 0B   00 01 00 09 00 12 00 20   .....Ù.. ....... 
>  [0040] 00 37 00 00 00 04 00 00   00 00 00 00 00 05 00 00   .7...... ........
>  [0050] 00 93 08 00 00 00 00 00   00 00 00 00 00 04 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 00 00 01 00 00   ........ ........
>  [0070] 00 4A 02 00 00 00 00 00   00 6E F3 8E 0F 00 00 00   .J...... .nó.....
>  [0080] 00 00 00 00 00 00 00 00   00 02 00 00 00 00 00 06   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 5C 00 5C   ........ .....\.\
>  [00A0] 00 64 00 61 00 73 00 74   00 61 00 72 00 64 00 6C   .d.a.s.t .a.r.d.l
>  [00B0] 00 79 00 2E 00 70 00 61   00 6E 00 69 00 63 00 2E   .y...p.a .n.i.c..
>  [00C0] 00 75 00 6E 00 63 00 2E   00 65 00 64 00 75 00 5C   .u.n.c.. .e.d.u.\
>  [00D0] 00 6C 00 69 00 62 00 72   00 61 00 00 00 5C 00 5C   .l.i.b.r .a...\.\
>  [00E0] 00 64 00 61 00 73 00 74   00 61 00 72 00 64 00 6C   .d.a.s.t .a.r.d.l
>  [00F0] 00 79 00 2E 00 70 00 61   00 6E 00 69 00 63 00 2E   .y...p.a .n.i.c..
>  [0100] 00 75 00 6E 00 63 00 2E   00 65 00 64 00 75 00 00   .u.n.c.. .e.d.u..
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0130] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 2192
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x890
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2283 of length 2196 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=2192
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44420
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2108 (0x83C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]= 2108 (0x83C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=2125
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 3C 08 00 00 0A 00 00   ........ .<......
>  [0020] 00 24 08 00 00 00 00 08   00 00 00 00 00 0C 00 00   .$...... ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00 02 00 00   .....ùJ? ..0.....
>  [0040] 00 00 00 02 00 00 08 00   00 90 62 97 01 30 24 31   ........ ..b..0$1
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 D9 07 0B   ........ .....Ù..
>  [0060] 00 01 00 09 00 12 00 20   00 37 00 00 00 04 00 00   .......  .7......
>  [0070] 00 00 00 00 00 05 00 00   00 93 08 00 00 00 00 00   ........ ........
>  [0080] 00 00 00 00 00 04 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 01 00 00   00 4A 02 00 00 00 00 00   ........ .J......
>  [00A0] 00 6E F3 8E 0F 00 00 00   00 00 00 00 00 00 00 00   .nó..... ........
>  [00B0] 00 02 00 00 00 00 00 06   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 5C 00 5C   00 64 00 61 00 73 00 74   .....\.\ .d.a.s.t
>  [00D0] 00 61 00 72 00 64 00 6C   00 79 00 2E 00 70 00 61   .a.r.d.l .y...p.a
>  [00E0] 00 6E 00 69 00 63 00 2E   00 75 00 6E 00 63 00 2E   .n.i.c.. .u.n.c..
>  [00F0] 00 65 00 64 00 75 00 5C   00 6C 00 69 00 62 00 72   .e.d.u.\ .l.i.b.r
>  [0100] 00 61 00 00 00 5C 00 5C   00 64 00 61 00 73 00 74   .a...\.\ .d.a.s.t
>  [0110] 00 61 00 72 00 64 00 6C   00 79 00 2E 00 70 00 61   .a.r.d.l .y...p.a
>  [0120] 00 6E 00 69 00 63 00 2E   00 75 00 6E 00 63 00 2E   .n.i.c.. .u.n.c..
>  [0130] 00 65 00 64 00 75 00 00   00 00 00 00 00 00 00 00   .e.d.u.. ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=2108 params=0 setup=2
>[2009/11/10 09:57:04,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:04,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:04,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:04,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:04, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 2108, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 2092
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 083c
>      000a auth_len  : 0000
>      000c call_id   : 0000000a
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 2092, incoming data = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000824
>      0004 context_id: 0000
>      0006 opnum     : 0008
>[2009/11/10 09:57:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:04,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x8 - api_rpcTNP: rpc command: SPOOLSS_GETPRINTER
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[8].fn == 0x82af5f0
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinter: struct spoolss_GetPrinter
>          in: struct spoolss_GetPrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>              level                    : 0x00000002 (2)
>              buffer                   : *
>                  buffer                   : DATA_BLOB length=2048
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 90 62 97 01 30 24 31 00   00 00 00 00 00 00 00 00   .b..0$1. ........
>  [0010] 00 00 00 00 D9 07 0B 00   01 00 09 00 12 00 20 00   ....Ù... ...... .
>  [0020] 37 00 00 00 04 00 00 00   00 00 00 00 05 00 00 00   7....... ........
>  [0030] 93 08 00 00 00 00 00 00   00 00 00 00 04 00 00 00   ........ ........
>  [0040] 00 00 00 00 00 00 00 00   00 00 00 00 01 00 00 00   ........ ........
>  [0050] 4A 02 00 00 00 00 00 00   6E F3 8E 0F 00 00 00 00   J....... nó......
>  [0060] 00 00 00 00 00 00 00 00   02 00 00 00 00 00 06 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 5C 00 5C 00   ........ ....\.\.
>  [0080] 64 00 61 00 73 00 74 00   61 00 72 00 64 00 6C 00   d.a.s.t. a.r.d.l.
>  [0090] 79 00 2E 00 70 00 61 00   6E 00 69 00 63 00 2E 00   y...p.a. n.i.c...
>  [00A0] 75 00 6E 00 63 00 2E 00   65 00 64 00 75 00 5C 00   u.n.c... e.d.u.\.
>  [00B0] 6C 00 69 00 62 00 72 00   61 00 00 00 5C 00 5C 00   l.i.b.r. a...\.\.
>  [00C0] 64 00 61 00 73 00 74 00   61 00 72 00 64 00 6C 00   d.a.s.t. a.r.d.l.
>  [00D0] 79 00 2E 00 70 00 61 00   6E 00 69 00 63 00 2E 00   y...p.a. n.i.c...
>  [00E0] 75 00 6E 00 63 00 2E 00   65 00 64 00 75 00 00 00   u.n.c... e.d.u...
>  [00F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0100] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0130] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0200] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0210] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0220] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0230] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0240] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0250] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0260] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0270] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0280] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0290] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0300] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0310] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0320] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0330] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0340] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0350] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0360] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0370] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0380] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0390] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0400] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0410] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0420] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0430] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0440] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0450] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0460] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0470] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0480] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0490] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0500] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0510] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0520] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0530] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0540] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0550] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0560] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0570] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0580] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0590] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0600] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0610] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0620] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0630] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0640] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0650] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0660] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0670] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0680] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0690] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0700] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0710] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0720] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0730] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0740] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0750] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0760] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0770] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0780] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0790] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>              offered                  : 0x00000800 (2048)
>[2009/11/10 09:57:04,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:04,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:04,  4] rpc_server/srv_spoolss_nt.c:377(get_printer_snum)
>  short name:libra
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:04,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:04,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:04,  7] rpc_server/srv_spoolss_nt.c:3939(construct_dev_mode)
>  construct_dev_mode
>  getting printer characteristics
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:04,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:04,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>  loading DEVICEMODE
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinter: struct spoolss_GetPrinter
>          out: struct spoolss_GetPrinter
>              info                     : *
>                  info                     : union spoolss_PrinterInfo(case 2)
>                  info2: struct spoolss_PrinterInfo2
>                      servername               : *
>                          servername               : '\\dastardly.panic.unc.edu'
>                      printername              : *
>                          printername              : '\\dastardly.panic.unc.edu\libra'
>                      sharename                : *
>                          sharename                : 'libra'
>                      portname                 : *
>                          portname                 : 'Samba Printer Port'
>                      drivername               : *
>                          drivername               : 'HP LaserJet 4250 PCL6'
>                      comment                  : *
>                          comment                  : ''
>                      location                 : *
>                          location                 : ''
>                      devmode                  : *
>                          devmode: struct spoolss_DeviceMode
>                              devicename               : '\\dastardly.panic.unc.edu\libra'
>                              specversion              : 0x0401 (1025)
>                              driverversion            : 0x0400 (1024)
>                              size                     : 0x00dc (220)
>                              __driverextra_length     : 0x0000 (0)
>                              fields                   : 0x00014713 (83731)
>                                     1: DEVMODE_ORIENTATION      
>                                     1: DEVMODE_PAPERSIZE        
>                                     0: DEVMODE_PAPERLENGTH      
>                                     0: DEVMODE_PAPERWIDTH       
>                                     1: DEVMODE_SCALE            
>                                     0: DEVMODE_POSITION         
>                                     0: DEVMODE_NUP              
>                                     1: DEVMODE_COPIES           
>                                     1: DEVMODE_DEFAULTSOURCE    
>                                     1: DEVMODE_PRINTQUALITY     
>                                     0: DEVMODE_COLOR            
>                                     0: DEVMODE_DUPLEX           
>                                     0: DEVMODE_YRESOLUTION      
>                                     1: DEVMODE_TTOPTION         
>                                     0: DEVMODE_COLLATE          
>                                     1: DEVMODE_FORMNAME         
>                                     0: DEVMODE_LOGPIXELS        
>                                     0: DEVMODE_BITSPERPEL       
>                                     0: DEVMODE_PELSWIDTH        
>                                     0: DEVMODE_PELSHEIGHT       
>                                     0: DEVMODE_DISPLAYFLAGS     
>                                     0: DEVMODE_DISPLAYFREQUENCY 
>                                     0: DEVMODE_ICMMETHOD        
>                                     0: DEVMODE_ICMINTENT        
>                                     0: DEVMODE_MEDIATYPE        
>                                     0: DEVMODE_DITHERTYPE       
>                                     0: DEVMODE_PANNINGWIDTH     
>                                     0: DEVMODE_PANNINGHEIGHT    
>                              orientation              : 0x0001 (1)
>                              papersize                : 0x0001 (1)
>                              paperlength              : 0x0000 (0)
>                              paperwidth               : 0x0000 (0)
>                              scale                    : 0x0064 (100)
>                              copies                   : 0x0001 (1)
>                              defaultsource            : 0x000f (15)
>                              printquality             : 0xfffc (65532)
>                              color                    : 0x0001 (1)
>                              duplex                   : 0x0001 (1)
>                              yresolution              : 0x0000 (0)
>                              ttoption                 : 0x0003 (3)
>                              collate                  : 0x0000 (0)
>                              formname                 : 'Letter'
>                              logpixels                : 0x0000 (0)
>                              bitsperpel               : 0x00000000 (0)
>                              pelswidth                : 0x00000000 (0)
>                              pelsheight               : 0x00000000 (0)
>                              displayflags             : 0x00000000 (0)
>                              displayfrequency         : 0x00000000 (0)
>                              icmmethod                : 0x00000000 (0)
>                              icmintent                : 0x00000000 (0)
>                              mediatype                : 0x00000000 (0)
>                              dithertype               : 0x00000000 (0)
>                              reserved1                : 0x00000000 (0)
>                              reserved2                : 0x00000000 (0)
>                              panningwidth             : 0x00000000 (0)
>                              panningheight            : 0x00000000 (0)
>                              driverextra_data         : DATA_BLOB length=0
>                      sepfile                  : *
>                          sepfile                  : ''
>                      printprocessor           : *
>                          printprocessor           : 'winprint'
>                      datatype                 : *
>                          datatype                 : 'RAW'
>                      parameters               : *
>                          parameters               : ''
>                      secdesc                  : *
>                          secdesc: struct security_descriptor
>                              revision                 : SECURITY_DESCRIPTOR_REVISION_1 (1)
>                              type                     : 0x8004 (32772)
>                                     0: SEC_DESC_OWNER_DEFAULTED 
>                                     0: SEC_DESC_GROUP_DEFAULTED 
>                                     1: SEC_DESC_DACL_PRESENT    
>                                     0: SEC_DESC_DACL_DEFAULTED  
>                                     0: SEC_DESC_SACL_PRESENT    
>                                     0: SEC_DESC_SACL_DEFAULTED  
>                                     0: SEC_DESC_DACL_TRUSTED    
>                                     0: SEC_DESC_SERVER_SECURITY 
>                                     0: SEC_DESC_DACL_AUTO_INHERIT_REQ
>                                     0: SEC_DESC_SACL_AUTO_INHERIT_REQ
>                                     0: SEC_DESC_DACL_AUTO_INHERITED
>                                     0: SEC_DESC_SACL_AUTO_INHERITED
>                                     0: SEC_DESC_DACL_PROTECTED  
>                                     0: SEC_DESC_SACL_PROTECTED  
>                                     0: SEC_DESC_RM_CONTROL_VALID
>                                     1: SEC_DESC_SELF_RELATIVE   
>                              owner_sid                : *
>                                  owner_sid                : S-1-5-32-544
>                              group_sid                : *
>                                  group_sid                : S-1-5-32-544
>                              sacl                     : NULL
>                              dacl                     : *
>                                  dacl: struct security_acl
>                                      revision                 : SECURITY_ACL_REVISION_NT4 (2)
>                                      size                     : 0x004c (76)
>                                      num_aces                 : 0x00000003 (3)
>                                      aces: ARRAY(3)
>                                          aces: struct security_ace
>                                              type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
>                                              flags                    : 0x02 (2)
>                                                     0: SEC_ACE_FLAG_OBJECT_INHERIT
>                                                     1: SEC_ACE_FLAG_CONTAINER_INHERIT
>                                                     0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
>                                                     0: SEC_ACE_FLAG_INHERIT_ONLY
>                                                     0: SEC_ACE_FLAG_INHERITED_ACE
>                                                  0x02: SEC_ACE_FLAG_VALID_INHERIT (2)
>                                                     0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
>                                                     0: SEC_ACE_FLAG_FAILED_ACCESS
>                                              size                     : 0x0014 (20)
>                                              access_mask              : 0x20020008 (537001992)
>                                              object                   : union security_ace_object_ctr(case 0)
>                                              trustee                  : S-1-1-0
>                                          aces: struct security_ace
>                                              type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
>                                              flags                    : 0x09 (9)
>                                                     1: SEC_ACE_FLAG_OBJECT_INHERIT
>                                                     0: SEC_ACE_FLAG_CONTAINER_INHERIT
>                                                     0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
>                                                     1: SEC_ACE_FLAG_INHERIT_ONLY
>                                                     0: SEC_ACE_FLAG_INHERITED_ACE
>                                                  0x09: SEC_ACE_FLAG_VALID_INHERIT (9)
>                                                     0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
>                                                     0: SEC_ACE_FLAG_FAILED_ACCESS
>                                              size                     : 0x0018 (24)
>                                              access_mask              : 0x100f000c (269418508)
>                                              object                   : union security_ace_object_ctr(case 0)
>                                              trustee                  : S-1-5-32-544
>                                          aces: struct security_ace
>                                              type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
>                                              flags                    : 0x02 (2)
>                                                     0: SEC_ACE_FLAG_OBJECT_INHERIT
>                                                     1: SEC_ACE_FLAG_CONTAINER_INHERIT
>                                                     0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
>                                                     0: SEC_ACE_FLAG_INHERIT_ONLY
>                                                     0: SEC_ACE_FLAG_INHERITED_ACE
>                                                  0x02: SEC_ACE_FLAG_VALID_INHERIT (2)
>                                                     0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
>                                                     0: SEC_ACE_FLAG_FAILED_ACCESS
>                                              size                     : 0x0018 (24)
>                                              access_mask              : 0x100f000c (269418508)
>                                              object                   : union security_ace_object_ctr(case 0)
>                                              trustee                  : S-1-5-32-544
>                      attributes               : 0x00001848 (6216)
>                             0: PRINTER_ATTRIBUTE_QUEUED 
>                             0: PRINTER_ATTRIBUTE_DIRECT 
>                             0: PRINTER_ATTRIBUTE_DEFAULT
>                             1: PRINTER_ATTRIBUTE_SHARED 
>                             0: PRINTER_ATTRIBUTE_NETWORK
>                             0: PRINTER_ATTRIBUTE_HIDDEN 
>                             1: PRINTER_ATTRIBUTE_LOCAL  
>                             0: PRINTER_ATTRIBUTE_ENABLE_DEVQ
>                             0: PRINTER_ATTRIBUTE_KEEPPRINTEDJOBS
>                             0: PRINTER_ATTRIBUTE_DO_COMPLETE_FIRST
>                             0: PRINTER_ATTRIBUTE_WORK_OFFLINE
>                             1: PRINTER_ATTRIBUTE_ENABLE_BIDI
>                             1: PRINTER_ATTRIBUTE_RAW_ONLY
>                             0: PRINTER_ATTRIBUTE_PUBLISHED
>                             0: PRINTER_ATTRIBUTE_FAX    
>                             0: PRINTER_ATTRIBUTE_TS     
>                      priority                 : 0x00000001 (1)
>                      defaultpriority          : 0x00000001 (1)
>                      starttime                : 0x00000000 (0)
>                      untiltime                : 0x00000000 (0)
>                      status                   : 0x00000000 (0)
>                             0: PRINTER_STATUS_PAUSED    
>                             0: PRINTER_STATUS_ERROR     
>                             0: PRINTER_STATUS_PENDING_DELETION
>                             0: PRINTER_STATUS_PAPER_JAM 
>                             0: PRINTER_STATUS_PAPER_OUT 
>                             0: PRINTER_STATUS_MANUAL_FEED
>                             0: PRINTER_STATUS_PAPER_PROBLEM
>                             0: PRINTER_STATUS_OFFLINE   
>                             0: PRINTER_STATUS_IO_ACTIVE 
>                             0: PRINTER_STATUS_BUSY      
>                             0: PRINTER_STATUS_PRINTING  
>                             0: PRINTER_STATUS_OUTPUT_BIN_FULL
>                             0: PRINTER_STATUS_NOT_AVAILABLE
>                             0: PRINTER_STATUS_WAITING   
>                             0: PRINTER_STATUS_PROCESSING
>                             0: PRINTER_STATUS_INITIALIZING
>                             0: PRINTER_STATUS_WARMING_UP
>                             0: PRINTER_STATUS_TONER_LOW 
>                             0: PRINTER_STATUS_NO_TONER  
>                             0: PRINTER_STATUS_PAGE_PUNT 
>                             0: PRINTER_STATUS_USER_INTERVENTION
>                             0: PRINTER_STATUS_OUT_OF_MEMORY
>                             0: PRINTER_STATUS_DOOR_OPEN 
>                             0: PRINTER_STATUS_SERVER_UNKNOWN
>                             0: PRINTER_STATUS_POWER_SAVE
>                      cjobs                    : 0x00000000 (0)
>                      averageppm               : 0x00000000 (0)
>              needed                   : *
>                  needed                   : 0x000002a4 (676)
>              result                   : WERR_OK
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 797
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 2092
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa6683e0
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa6683e0
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 2064.
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0828
>      000a auth_len  : 0000
>      000c call_id   : 0000000a
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000810
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:04,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..2088] (align 0)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=2144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44420
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2088 (0x828)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 2088 (0x828)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=2089
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 28 08 00 00 0A 00 00   ........ .(......
>  [0010] 00 10 08 00 00 00 00 00   00 00 00 02 00 00 08 00   ........ ........
>  [0020] 00 54 00 00 00 88 00 00   00 C8 00 00 00 D4 00 00   .T...... .È...Ô..
>  [0030] 00 FA 00 00 00 26 01 00   00 28 01 00 00 2A 01 00   .ú...&.. .(...*..
>  [0040] 00 06 02 00 00 08 02 00   00 1A 02 00 00 22 02 00   ........ ....."..
>  [0050] 00 24 02 00 00 48 18 00   00 01 00 00 00 01 00 00   .$...H.. ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 5C 00 5C   00 64 00 61 00 73 00 74   .....\.\ .d.a.s.t
>  [0080] 00 61 00 72 00 64 00 6C   00 79 00 2E 00 70 00 61   .a.r.d.l .y...p.a
>  [0090] 00 6E 00 69 00 63 00 2E   00 75 00 6E 00 63 00 2E   .n.i.c.. .u.n.c..
>  [00A0] 00 65 00 64 00 75 00 00   00 5C 00 5C 00 64 00 61   .e.d.u.. .\.\.d.a
>  [00B0] 00 73 00 74 00 61 00 72   00 64 00 6C 00 79 00 2E   .s.t.a.r .d.l.y..
>  [00C0] 00 70 00 61 00 6E 00 69   00 63 00 2E 00 75 00 6E   .p.a.n.i .c...u.n
>  [00D0] 00 63 00 2E 00 65 00 64   00 75 00 5C 00 6C 00 69   .c...e.d .u.\.l.i
>  [00E0] 00 62 00 72 00 61 00 00   00 6C 00 69 00 62 00 72   .b.r.a.. .l.i.b.r
>  [00F0] 00 61 00 00 00 53 00 61   00 6D 00 62 00 61 00 20   .a...S.a .m.b.a. 
>  [0100] 00 50 00 72 00 69 00 6E   00 74 00 65 00 72 00 20   .P.r.i.n .t.e.r. 
>  [0110] 00 50 00 6F 00 72 00 74   00 00 00 48 00 50 00 20   .P.o.r.t ...H.P. 
>  [0120] 00 4C 00 61 00 73 00 65   00 72 00 4A 00 65 00 74   .L.a.s.e .r.J.e.t
>  [0130] 00 20 00 34 00 32 00 35   00 30 00 20 00 50 00 43   . .4.2.5 .0. .P.C
>  [0140] 00 4C 00 36 00 00 00 00   00 00 00 5C 00 5C 00 64   .L.6.... ...\.\.d
>  [0150] 00 61 00 73 00 74 00 61   00 72 00 64 00 6C 00 79   .a.s.t.a .r.d.l.y
>  [0160] 00 2E 00 70 00 61 00 6E   00 69 00 63 00 2E 00 75   ...p.a.n .i.c...u
>  [0170] 00 6E 00 63 00 2E 00 65   00 64 00 75 00 5C 00 6C   .n.c...e .d.u.\.l
>  [0180] 00 69 00 62 00 72 00 61   00 00 00 01 04 00 04 DC   .i.b.r.a .......Ü
>  [0190] 00 00 00 13 47 01 00 01   00 01 00 00 00 00 00 64   ....G... .......d
>  [01A0] 00 01 00 0F 00 FC FF 01   00 01 00 00 00 03 00 00   .....üÿ. ........
>  [01B0] 00 4C 00 65 00 74 00 74   00 65 00 72 00 00 00 00   .L.e.t.t .e.r....
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 2192
>[2009/11/10 09:57:04,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x890
>[2009/11/10 09:57:04,  3] smbd/process.c:1459(process_smb)
>  Transaction 2284 of length 2196 (0 toread)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=2192
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44484
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2108 (0x83C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]= 2108 (0x83C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=2125
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 3C 08 00 00 0B 00 00   ........ .<......
>  [0020] 00 24 08 00 00 00 00 08   00 00 00 00 00 0C 00 00   .$...... ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00 07 00 00   .....ùJ? ..0.....
>  [0040] 00 00 00 02 00 00 08 00   00 B8 E4 97 01 30 24 31   ........ .¸ä..0$1
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0100] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0130] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:04,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:04,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=2108 params=0 setup=2
>[2009/11/10 09:57:04,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:04,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:04,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:04,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:04, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 2108
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 2108, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 2092
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 083c
>      000a auth_len  : 0000
>      000c call_id   : 0000000b
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 2092, incoming data = 2092
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000824
>      0004 context_id: 0000
>      0006 opnum     : 0008
>[2009/11/10 09:57:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:04,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x8 - api_rpcTNP: rpc command: SPOOLSS_GETPRINTER
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[8].fn == 0x82af5f0
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinter: struct spoolss_GetPrinter
>          in: struct spoolss_GetPrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>              level                    : 0x00000007 (7)
>              buffer                   : *
>                  buffer                   : DATA_BLOB length=2048
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] B8 E4 97 01 30 24 31 00   00 00 00 00 00 00 00 00   ¸ä..0$1. ........
>  [0010] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0100] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0130] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0200] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0210] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0220] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0230] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0240] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0250] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0260] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0270] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0280] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0290] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [02F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0300] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0310] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0320] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0330] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0340] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0350] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0360] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0370] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0380] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0390] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [03F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0400] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0410] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0420] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0430] 00 00 00 00 00 00 00 00   C8 01 2B 6D 00 00 00 00   ........ È.+m....
>  [0440] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0450] B9 00 00 B9 0B D5 02 00   88 56 99 01 30 24 31 00   ¹..¹.Õ.. .V..0$1.
>  [0460] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0470] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0480] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0490] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [04F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0500] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0510] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0520] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0530] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0540] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0550] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0560] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0570] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0580] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0590] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [05F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0600] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0610] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0620] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0630] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0640] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0650] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0660] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0670] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0680] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0690] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [06F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0700] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0710] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0720] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0730] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0740] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0750] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0760] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0770] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0780] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0790] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [07F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>              offered                  : 0x00000800 (2048)
>[2009/11/10 09:57:04,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:04,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:04,  4] rpc_server/srv_spoolss_nt.c:377(get_printer_snum)
>  short name:libra
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:04,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:04,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:04,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:04, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:04,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinter: struct spoolss_GetPrinter
>          out: struct spoolss_GetPrinter
>              info                     : *
>                  info                     : union spoolss_PrinterInfo(case 7)
>                  info7: struct spoolss_PrinterInfo7
>                      guid                     : *
>                          guid                     : ''
>                      action                   : 0x00000004 (4)
>                             0: DSPRINT_PUBLISH          
>                             0: DSPRINT_UPDATE           
>                             1: DSPRINT_UNPUBLISH        
>                             0: DSPRINT_REPUBLISH        
>                             0: DSPRINT_PENDING          
>              needed                   : *
>                  needed                   : 0x0000000a (10)
>              result                   : WERR_OK
>[2009/11/10 09:57:04,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 2092
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa6683e0
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa6683e0
>[2009/11/10 09:57:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:04, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 2064.
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0828
>      000a auth_len  : 0000
>      000c call_id   : 0000000b
>[2009/11/10 09:57:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000810
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:04,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..2088] (align 0)
>[2009/11/10 09:57:04,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:04,  5] lib/util.c:642(show_msg)
>  size=2144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44484
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2088 (0x828)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 2088 (0x828)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=2089
>[2009/11/10 09:57:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 28 08 00 00 0B 00 00   ........ .(......
>  [0010] 00 10 08 00 00 00 00 00   00 00 00 02 00 00 08 00   ........ ........
>  [0020] 00 08 00 00 00 04 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0100] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0130] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 102
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x66
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2285 of length 106 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=102
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44548
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4096 (0x1000)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 4609 (0x1201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=19
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 23 5C 00 73 00 70 00 6F   00 6F 00 6C 00 73 00 73   #\.s.p.o .o.l.s.s
>  [0010] 00 00 00                                          ... 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x12019f file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = spoolss
>[2009/11/10 09:57:05,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \spoolss.
>[2009/11/10 09:57:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 885, fnum = 4981 (23 used)
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \spoolss
>[2009/11/10 09:57:05, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 6 for pipe \spoolss
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(139759, 1001) : sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username brinegar, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain PHYSICS.UNC.EDU, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name Justin Brinegar, was 
>[2009/11/10 09:57:05,  4] lib/substitute.c:504(automount_server)
>  Home server: dastardly.panic.unc.edu
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\dastardly.panic.unc.edu\brinegar, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/11/10 09:57:05,  4] lib/substitute.c:504(automount_server)
>  Home server: dastardly.panic.unc.edu
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\dastardly.panic.unc.edu\brinegar\profile, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(139759, 1001) : sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-114069156-2663528578-1345302127-280518
>[2009/11/10 09:57:05, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-114069156-2663528578-1345302127-280518 from rid 280518
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \spoolss (pipes_open=0)
>[2009/11/10 09:57:05,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \spoolss
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 180
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0xb4
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2286 of length 184 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=180
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44612
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4981 (0x1375)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=  116 (0x74)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  116 (0x74)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=117
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 74 00 00 00 02 00 00   î....... .t......
>  [0010] 00 B8 10 B8 10 00 00 00   00 02 00 00 00 00 00 01   .¸.¸.... ........
>  [0020] 00 78 56 34 12 34 12 CD   AB EF 00 01 23 45 67 89   .xV4.4.Í «ï..#Eg.
>  [0030] AB 01 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   «.....]. .ë.É..è.
>  [0040] 00 2B 10 48 60 02 00 00   00 01 00 01 00 78 56 34   .+.H`... .....xV4
>  [0050] 12 34 12 CD AB EF 00 01   23 45 67 89 AB 01 00 00   .4.Í«ï.. #Eg.«...
>  [0060] 00 2C 1C B7 6C 12 98 40   45 03 00 00 00 00 00 00   .,.·l..@ E.......
>  [0070] 00 01 00 00 00                                    ..... 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBwriteX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 1375 name: spoolss len: 116
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0074
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 02
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 12345678
>              0014 data   : 1234
>              0016 data   : abcd
>              0018 data   : ef 00 
>              001a data   : 01 23 45 67 89 ab 
>          0020 version: 00000001
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>      0038 context_id  : 0001
>      003a num_transfer_syntaxes: 01
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00003b smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          00003c smb_io_uuid uuid
>              003c data   : 12345678
>              0040 data   : 1234
>              0042 data   : abcd
>              0044 data   : ef 00 
>              0046 data   : 01 23 45 67 89 ab 
>          004c version: 00000001
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000050 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000050 smb_io_uuid uuid
>              0050 data   : 6cb71c2c
>              0054 data   : 9812
>              0056 data   : 4540
>              0058 data   : 03 00 
>              005a data   : 00 00 00 00 00 00 
>          0060 version: 00000001
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \spoolss
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>  checking spoolss
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000e
>          000a str: \PIPE\spoolss.
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000018 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 100
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa667390
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa667390
>[2009/11/10 09:57:05,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=116
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2287 of length 63 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44676
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4981 (0x1375)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 1024
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \spoolss: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa6697c8
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa6697c8
>[2009/11/10 09:57:05,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 224
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0xe0
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2288 of length 228 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=224
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44740
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  140 (0x8C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=  140 (0x8C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4981 (0x1375)
>  smb_bcc=157
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 8C 00 00 00 02 00 00   ........ ........
>  [0020] 00 74 00 00 00 00 00 33   00 00 00 02 00 1A 00 00   .t.....3 ........
>  [0030] 00 00 00 00 00 1A 00 00   00 5C 00 5C 00 64 00 61   ........ .\.\.d.a
>  [0040] 00 73 00 74 00 61 00 72   00 64 00 6C 00 79 00 2E   .s.t.a.r .d.l.y..
>  [0050] 00 70 00 61 00 6E 00 69   00 63 00 2E 00 75 00 6E   .p.a.n.i .c...u.n
>  [0060] 00 63 00 2E 00 65 00 64   00 75 00 00 00 04 00 02   .c...e.d .u......
>  [0070] 00 09 00 00 00 00 00 00   00 09 00 00 00 77 00 69   ........ .....w.i
>  [0080] 00 6E 00 70 00 72 00 69   00 6E 00 74 00 00 00 00   .n.p.r.i .n.t....
>  [0090] 00 01 00 00 00 00 00 00   00 00 00 00 00           ........ .....
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=140 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 1375)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5f5528 max_trans_reply: 1024
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 140
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 140
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 140
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 140, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 124
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 124
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 008c
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 124
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 124, incoming data = 124
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000074
>      0004 context_id: 0000
>      0006 opnum     : 0033
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 120
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x33 - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTPROCDATATYPES
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[51].fn == 0x82a7030
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrintProcDataTypes: struct spoolss_EnumPrintProcDataTypes
>          in: struct spoolss_EnumPrintProcDataTypes
>              servername               : *
>                  servername               : '\\dastardly.panic.unc.edu'
>              print_processor_name     : *
>                  print_processor_name     : 'winprint'
>              level                    : 0x00000001 (1)
>              buffer                   : NULL
>              offered                  : 0x00000000 (0)
>[2009/11/10 09:57:05,  5] rpc_server/srv_spoolss_nt.c:8653(_spoolss_EnumPrintProcDataTypes)
>  _spoolss_EnumPrintProcDataTypes
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrintProcDataTypes: struct spoolss_EnumPrintProcDataTypes
>          out: struct spoolss_EnumPrintProcDataTypes
>              count                    : *
>                  count                    : 0x00000000 (0)
>              info                     : *
>                  info                     : NULL
>              needed                   : *
>                  needed                   : 0x0000000c (12)
>              result                   : WERR_INSUFFICIENT_BUFFER
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1096
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 124
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa66b510
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa66b510
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 1024
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 16.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0028
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000010
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa583358
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa583358
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..40] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44740
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 28 00 00 00 02 00 00   ........ .(......
>  [0010] 00 10 00 00 00 00 00 00   00 00 00 00 00 0C 00 00   ........ ........
>  [0020] 00 00 00 00 00 7A 00 00   00                       .....z.. .
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2289 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44804
>  smt_wct=3
>  smb_vwv[ 0]= 4981 (0x1375)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=4981 (numopen=6)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 4981 (22 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44804
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 102
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x66
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2290 of length 106 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=102
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=44868
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4096 (0x1000)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 4609 (0x1201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=19
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 73 00 70 00 6F   00 6F 00 6C 00 73 00 73   .\.s.p.o .o.l.s.s
>  [0010] 00 00 00                                          ... 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x12019f file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = spoolss
>[2009/11/10 09:57:05,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \spoolss.
>[2009/11/10 09:57:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 886, fnum = 4982 (23 used)
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \spoolss
>[2009/11/10 09:57:05, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 6 for pipe \spoolss
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(139759, 1001) : sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username brinegar, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain PHYSICS.UNC.EDU, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name Justin Brinegar, was 
>[2009/11/10 09:57:05,  4] lib/substitute.c:504(automount_server)
>  Home server: dastardly.panic.unc.edu
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\dastardly.panic.unc.edu\brinegar, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/11/10 09:57:05,  4] lib/substitute.c:504(automount_server)
>  Home server: dastardly.panic.unc.edu
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\dastardly.panic.unc.edu\brinegar\profile, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(139759, 1001) : sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-114069156-2663528578-1345302127-280518
>[2009/11/10 09:57:05, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-114069156-2663528578-1345302127-280518 from rid 280518
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \spoolss (pipes_open=0)
>[2009/11/10 09:57:05,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \spoolss
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 180
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0xb4
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2291 of length 184 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=180
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44932
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4982 (0x1376)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=  116 (0x74)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  116 (0x74)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=117
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 74 00 00 00 02 00 00   î....... .t......
>  [0010] 00 B8 10 B8 10 00 00 00   00 02 00 00 00 00 00 01   .¸.¸.... ........
>  [0020] 00 78 56 34 12 34 12 CD   AB EF 00 01 23 45 67 89   .xV4.4.Í «ï..#Eg.
>  [0030] AB 01 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   «.....]. .ë.É..è.
>  [0040] 00 2B 10 48 60 02 00 00   00 01 00 01 00 78 56 34   .+.H`... .....xV4
>  [0050] 12 34 12 CD AB EF 00 01   23 45 67 89 AB 01 00 00   .4.Í«ï.. #Eg.«...
>  [0060] 00 2C 1C B7 6C 12 98 40   45 03 00 00 00 00 00 00   .,.·l..@ E.......
>  [0070] 00 01 00 00 00                                    ..... 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBwriteX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 1376 name: spoolss len: 116
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0074
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 02
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 12345678
>              0014 data   : 1234
>              0016 data   : abcd
>              0018 data   : ef 00 
>              001a data   : 01 23 45 67 89 ab 
>          0020 version: 00000001
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>      0038 context_id  : 0001
>      003a num_transfer_syntaxes: 01
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00003b smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          00003c smb_io_uuid uuid
>              003c data   : 12345678
>              0040 data   : 1234
>              0042 data   : abcd
>              0044 data   : ef 00 
>              0046 data   : 01 23 45 67 89 ab 
>          004c version: 00000001
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000050 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000050 smb_io_uuid uuid
>              0050 data   : 6cb71c2c
>              0054 data   : 9812
>              0056 data   : 4540
>              0058 data   : 03 00 
>              005a data   : 00 00 00 00 00 00 
>          0060 version: 00000001
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \spoolss
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>  checking spoolss
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000e
>          000a str: \PIPE\spoolss.
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000018 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 100
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa66b420
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa66b420
>[2009/11/10 09:57:05,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=116
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2292 of length 63 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=44996
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4982 (0x1376)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 1024
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \spoolss: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa66d858
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa66d858
>[2009/11/10 09:57:05,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 240
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0xf0
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2293 of length 244 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=240
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45060
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  156 (0x9C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=  156 (0x9C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4982 (0x1376)
>  smb_bcc=173
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 9C 00 00 00 02 00 00   ........ ........
>  [0020] 00 84 00 00 00 00 00 33   00 00 00 02 00 1A 00 00   .......3 ........
>  [0030] 00 00 00 00 00 1A 00 00   00 5C 00 5C 00 64 00 61   ........ .\.\.d.a
>  [0040] 00 73 00 74 00 61 00 72   00 64 00 6C 00 79 00 2E   .s.t.a.r .d.l.y..
>  [0050] 00 70 00 61 00 6E 00 69   00 63 00 2E 00 75 00 6E   .p.a.n.i .c...u.n
>  [0060] 00 63 00 2E 00 65 00 64   00 75 00 00 00 04 00 02   .c...e.d .u......
>  [0070] 00 09 00 00 00 00 00 00   00 09 00 00 00 77 00 69   ........ .....w.i
>  [0080] 00 6E 00 70 00 72 00 69   00 6E 00 74 00 00 00 00   .n.p.r.i .n.t....
>  [0090] 00 01 00 00 00 08 00 02   00 0C 00 00 00 50 00 41   ........ .....P.A
>  [00A0] 00 49 00 4E 00 54 00 4C   00 0C 00 00 00           .I.N.T.L .....
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=156 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 1376)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5f5528 max_trans_reply: 1024
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 156
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 156
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 156
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 156, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 140
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 140
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 009c
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 140
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 140, incoming data = 140
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000084
>      0004 context_id: 0000
>      0006 opnum     : 0033
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 120
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x33 - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTPROCDATATYPES
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[51].fn == 0x82a7030
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrintProcDataTypes: struct spoolss_EnumPrintProcDataTypes
>          in: struct spoolss_EnumPrintProcDataTypes
>              servername               : *
>                  servername               : '\\dastardly.panic.unc.edu'
>              print_processor_name     : *
>                  print_processor_name     : 'winprint'
>              level                    : 0x00000001 (1)
>              buffer                   : *
>                  buffer                   : DATA_BLOB length=12
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 50 00 41 00 49 00 4E 00   54 00 4C 00              P.A.I.N. T.L.
>              offered                  : 0x0000000c (12)
>[2009/11/10 09:57:05,  5] rpc_server/srv_spoolss_nt.c:8653(_spoolss_EnumPrintProcDataTypes)
>  _spoolss_EnumPrintProcDataTypes
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrintProcDataTypes: struct spoolss_EnumPrintProcDataTypes
>          out: struct spoolss_EnumPrintProcDataTypes
>              count                    : *
>                  count                    : 0x00000001 (1)
>              info                     : *
>                  info                     : *
>                      info: ARRAY(1)
>                          info                     : union spoolss_PrintProcDataTypesInfo(case 1)
>                          info1: struct spoolss_PrintProcDataTypesInfo1
>                              name_array               : *
>                                  name_array               : 'RAW'
>              needed                   : *
>                  needed                   : 0x0000000c (12)
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1096
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 140
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa66f5c0
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa66f5c0
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 1024
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 32.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0038
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000020
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5853c8
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5853c8
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..56] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=112
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45060
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   56 (0x38)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   56 (0x38)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=57
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 38 00 00 00 02 00 00   ........ .8......
>  [0010] 00 20 00 00 00 00 00 00   00 00 00 02 00 0C 00 00   . ...... ........
>  [0020] 00 04 00 00 00 52 00 41   00 57 00 00 00 0C 00 00   .....R.A .W......
>  [0030] 00 01 00 00 00 00 00 00   00                       ........ .
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2294 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45124
>  smt_wct=3
>  smb_vwv[ 0]= 4982 (0x1376)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=4982 (numopen=6)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 4982 (22 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45124
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 188
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0xbc
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2295 of length 192 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45188
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  104 (0x68)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=  104 (0x68)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=121
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 68 00 00 00 0C 00 00   ........ .h......
>  [0020] 00 50 00 00 00 00 00 1A   00 00 00 00 00 0C 00 00   .P...... ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00 15 00 00   .....ùJ? ..0.....
>  [0040] 00 00 00 00 00 15 00 00   00 45 00 4D 00 46 00 44   ........ .E.M.F.D
>  [0050] 00 65 00 73 00 70 00 6F   00 6F 00 6C 00 69 00 6E   .e.s.p.o .o.l.i.n
>  [0060] 00 67 00 53 00 65 00 74   00 74 00 69 00 6E 00 67   .g.S.e.t .t.i.n.g
>  [0070] 00 00 00 00 00 00 04 00   00                       ........ .
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=104 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 104
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 104
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 104
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 88
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0068
>      000a auth_len  : 0000
>      000c call_id   : 0000000c
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 88, incoming data = 88
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000050
>      0004 context_id: 0000
>      0006 opnum     : 001a
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x1a - api_rpcTNP: rpc command: SPOOLSS_GETPRINTERDATA
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[26].fn == 0x82abc80
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinterData: struct spoolss_GetPrinterData
>          in: struct spoolss_GetPrinterData
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>              value_name               : 'EMFDespoolingSetting'
>              offered                  : 0x00000400 (1024)
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:2513(_spoolss_GetPrinterData)
>  _spoolss_GetPrinterData
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:377(get_printer_snum)
>  short name:libra
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:05,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:05,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:05,  8] printing/nt_printing.c:3645(get_printer_data)
>  get_printer_data: Attempting to lookup key => [PrinterDriverData], value => [EMFDespoolingSetting]
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinterData: struct spoolss_GetPrinterData
>          out: struct spoolss_GetPrinterData
>              type                     : *
>                  type                     : REG_NONE (0)
>              data                     : *
>                  data                     : union spoolss_PrinterData(case 0)
>              needed                   : *
>                  needed                   : 0x00000000 (0)
>              result                   : WERR_BADFILE
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 88
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa66f550
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa66f550
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1040.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0428
>      000a auth_len  : 0000
>      000c call_id   : 0000000c
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000410
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..1064] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=1120
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45188
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1064 (0x428)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 1064 (0x428)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=1065
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 28 04 00 00 0C 00 00   ........ .(......
>  [0010] 00 10 04 00 00 00 00 00   00 00 00 00 00 00 04 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0100] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0130] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 196
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0xc4
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2296 of length 200 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=196
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45252
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  112 (0x70)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=  112 (0x70)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=129
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 70 00 00 00 0D 00 00   ........ .p......
>  [0020] 00 58 00 00 00 00 00 1A   00 00 00 00 00 0C 00 00   .X...... ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00 19 00 00   .....ùJ? ..0.....
>  [0040] 00 00 00 00 00 19 00 00   00 46 00 6F 00 72 00 63   ........ .F.o.r.c
>  [0050] 00 65 00 43 00 6C 00 69   00 65 00 6E 00 74 00 53   .e.C.l.i .e.n.t.S
>  [0060] 00 69 00 64 00 65 00 52   00 65 00 6E 00 64 00 65   .i.d.e.R .e.n.d.e
>  [0070] 00 72 00 69 00 6E 00 67   00 00 00 00 00 00 04 00   .r.i.n.g ........
>  [0080] 00                                                . 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=112 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 112
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 112
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 112
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 112, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 96
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 96
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0070
>      000a auth_len  : 0000
>      000c call_id   : 0000000d
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 96
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 96, incoming data = 96
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000058
>      0004 context_id: 0000
>      0006 opnum     : 001a
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x1a - api_rpcTNP: rpc command: SPOOLSS_GETPRINTERDATA
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[26].fn == 0x82abc80
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinterData: struct spoolss_GetPrinterData
>          in: struct spoolss_GetPrinterData
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>              value_name               : 'ForceClientSideRendering'
>              offered                  : 0x00000400 (1024)
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:2513(_spoolss_GetPrinterData)
>  _spoolss_GetPrinterData
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:377(get_printer_snum)
>  short name:libra
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:05,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:05,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:05,  8] printing/nt_printing.c:3645(get_printer_data)
>  get_printer_data: Attempting to lookup key => [PrinterDriverData], value => [ForceClientSideRendering]
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinterData: struct spoolss_GetPrinterData
>          out: struct spoolss_GetPrinterData
>              type                     : *
>                  type                     : REG_NONE (0)
>              data                     : *
>                  data                     : union spoolss_PrinterData(case 0)
>              needed                   : *
>                  needed                   : 0x00000000 (0)
>              result                   : WERR_BADFILE
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 96
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa66f560
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa66f560
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1040.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0428
>      000a auth_len  : 0000
>      000c call_id   : 0000000d
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000410
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa568638
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa568638
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..1064] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=1120
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45252
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1064 (0x428)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 1064 (0x428)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=1065
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 28 04 00 00 0D 00 00   ........ .(......
>  [0010] 00 10 04 00 00 00 00 00   00 00 00 00 00 00 04 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0100] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0130] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0140] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0150] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0160] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [01F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 102
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x66
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2297 of length 106 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=102
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45316
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4096 (0x1000)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]= 4609 (0x1201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=19
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 73 00 70 00 6F   00 6F 00 6C 00 73 00 73   .\.s.p.o .o.l.s.s
>  [0010] 00 00 00                                          ... 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBntcreateX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x12019f file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = spoolss
>[2009/11/10 09:57:05,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \spoolss.
>[2009/11/10 09:57:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 887, fnum = 4983 (23 used)
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \spoolss
>[2009/11/10 09:57:05, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 6 for pipe \spoolss
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(139759, 1001) : sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username brinegar, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain PHYSICS.UNC.EDU, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name Justin Brinegar, was 
>[2009/11/10 09:57:05,  4] lib/substitute.c:504(automount_server)
>  Home server: dastardly.panic.unc.edu
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\dastardly.panic.unc.edu\brinegar, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/11/10 09:57:05,  4] lib/substitute.c:504(automount_server)
>  Home server: dastardly.panic.unc.edu
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\dastardly.panic.unc.edu\brinegar\profile, was 
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(139759, 1001) : sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-114069156-2663528578-1345302127-280518
>[2009/11/10 09:57:05, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-114069156-2663528578-1345302127-280518 from rid 280518
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \spoolss (pipes_open=0)
>[2009/11/10 09:57:05,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \spoolss
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 180
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0xb4
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2298 of length 184 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=180
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45380
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4983 (0x1377)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=  116 (0x74)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  116 (0x74)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=117
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 74 00 00 00 02 00 00   î....... .t......
>  [0010] 00 B8 10 B8 10 00 00 00   00 02 00 00 00 00 00 01   .¸.¸.... ........
>  [0020] 00 78 56 34 12 34 12 CD   AB EF 00 01 23 45 67 89   .xV4.4.Í «ï..#Eg.
>  [0030] AB 01 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   «.....]. .ë.É..è.
>  [0040] 00 2B 10 48 60 02 00 00   00 01 00 01 00 78 56 34   .+.H`... .....xV4
>  [0050] 12 34 12 CD AB EF 00 01   23 45 67 89 AB 01 00 00   .4.Í«ï.. #Eg.«...
>  [0060] 00 2C 1C B7 6C 12 98 40   45 03 00 00 00 00 00 00   .,.·l..@ E.......
>  [0070] 00 01 00 00 00                                    ..... 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBwriteX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 1377 name: spoolss len: 116
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0074
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 02
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 12345678
>              0014 data   : 1234
>              0016 data   : abcd
>              0018 data   : ef 00 
>              001a data   : 01 23 45 67 89 ab 
>          0020 version: 00000001
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>      0038 context_id  : 0001
>      003a num_transfer_syntaxes: 01
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00003b smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          00003c smb_io_uuid uuid
>              003c data   : 12345678
>              0040 data   : 1234
>              0042 data   : abcd
>              0044 data   : ef 00 
>              0046 data   : 01 23 45 67 89 ab 
>          004c version: 00000001
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000050 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000050 smb_io_uuid uuid
>              0050 data   : 6cb71c2c
>              0054 data   : 9812
>              0056 data   : 4540
>              0058 data   : 03 00 
>              005a data   : 00 00 00 00 00 00 
>          0060 version: 00000001
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \spoolss
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>  checking spoolss
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000e
>          000a str: \PIPE\spoolss.
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000018 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/11/10 09:57:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/11/10 09:57:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 100
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa66f4b0
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa66f4b0
>[2009/11/10 09:57:05,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=116
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2299 of length 63 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45444
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4983 (0x1377)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBreadX (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 1024
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \spoolss: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa6718e8
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa6718e8
>[2009/11/10 09:57:05,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 496
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x1f0
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2300 of length 500 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=496
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45508
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  412 (0x19C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=  412 (0x19C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4983 (0x1377)
>  smb_bcc=429
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 9C 01 00 00 02 00 00   ........ ........
>  [0020] 00 84 01 00 00 00 00 0C   00 00 00 02 00 1A 00 00   ........ ........
>  [0030] 00 00 00 00 00 1A 00 00   00 5C 00 5C 00 64 00 61   ........ .\.\.d.a
>  [0040] 00 73 00 74 00 61 00 72   00 64 00 6C 00 79 00 2E   .s.t.a.r .d.l.y..
>  [0050] 00 70 00 61 00 6E 00 69   00 63 00 2E 00 75 00 6E   .p.a.n.i .c...u.n
>  [0060] 00 63 00 2E 00 65 00 64   00 75 00 00 00 04 00 02   .c...e.d .u......
>  [0070] 00 0F 00 00 00 00 00 00   00 0F 00 00 00 57 00 69   ........ .....W.i
>  [0080] 00 6E 00 64 00 6F 00 77   00 73 00 20 00 4E 00 54   .n.d.o.w .s. .N.T
>  [0090] 00 20 00 78 00 38 00 36   00 00 00 00 00 01 00 00   . .x.8.6 ........
>  [00A0] 00 08 00 02 00 00 01 00   00 98 6A 97 01 30 E1 96   ........ ..j..0á.
>  [00B0] 01 57 00 41 00 52 00 45   00 5C 00 4D 00 69 00 63   .W.A.R.E .\.M.i.c
>  [00C0] 00 72 00 6F 00 73 00 6F   00 66 00 74 00 5C 00 57   .r.o.s.o .f.t.\.W
>  [00D0] 00 69 00 6E 00 64 00 6F   00 77 00 73 00 20 00 4E   .i.n.d.o .w.s. .N
>  [00E0] 00 54 00 5C 00 43 00 75   00 72 00 72 00 65 00 6E   .T.\.C.u .r.r.e.n
>  [00F0] 00 74 00 56 00 65 00 72   00 73 00 69 00 6F 00 6E   .t.V.e.r .s.i.o.n
>  [0100] 00 5C 00 50 00 72 00 69   00 6E 00 74 00 5C 00 50   .\.P.r.i .n.t.\.P
>  [0110] 00 72 00 6F 00 76 00 69   00 64 00 65 00 72 00 73   .r.o.v.i .d.e.r.s
>  [0120] 00 5C 00 43 00 6C 00 69   00 65 00 6E 00 74 00 20   .\.C.l.i .e.n.t. 
>  [0130] 00 53 00 69 00 64 00 65   00 20 00 52 00 65 00 6E   .S.i.d.e . .R.e.n
>  [0140] 00 64 00 65 00 72 00 69   00 6E 00 67 00 20 00 50   .d.e.r.i .n.g. .P
>  [0150] 00 72 00 69 00 6E 00 74   00 20 00 50 00 72 00 6F   .r.i.n.t . .P.r.o
>  [0160] 00 76 00 69 00 64 00 65   00 72 00 5C 00 53 00 65   .v.i.d.e .r.\.S.e
>  [0170] 00 72 00 76 00 65 00 72   00 73 00 5C 00 64 00 61   .r.v.e.r .s.\.d.a
>  [0180] 00 73 00 74 00 61 00 72   00 64 00 6C 00 79 00 2E   .s.t.a.r .d.l.y..
>  [0190] 00 70 00 61 00 6E 00 69   00 63 00 2E 00 75 00 6E   .p.a.n.i .c...u.n
>  [01A0] 00 63 00 2E 00 65 00 64   00 00 01 00 00           .c...e.d .....
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-114069156-2663528578-1345302127-280518
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-114069156-2663528578-1345302127-280518
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-123
>  SID[  6]: S-1-22-1-139759
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 139759
>  Primary group is 1001 and contains 2 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 123
>[2009/11/10 09:57:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,139759) gid=(0,1001)
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=412 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 1377)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5f54c0 max_trans_reply: 1024
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 412
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 412
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 412
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 412, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 396
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 396
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 019c
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 396
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 396, incoming data = 396
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000184
>      0004 context_id: 0000
>      0006 opnum     : 000c
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 120
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0xc - api_rpcTNP: rpc command: SPOOLSS_GETPRINTERDRIVERDIRECTORY
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[12].fn == 0x82ae8e0
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinterDriverDirectory: struct spoolss_GetPrinterDriverDirectory
>          in: struct spoolss_GetPrinterDriverDirectory
>              server                   : *
>                  server                   : '\\dastardly.panic.unc.edu'
>              environment              : *
>                  environment              : 'Windows NT x86'
>              level                    : 0x00000001 (1)
>              buffer                   : *
>                  buffer                   : DATA_BLOB length=256
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 98 6A 97 01 30 E1 96 01   57 00 41 00 52 00 45 00   .j..0á.. W.A.R.E.
>  [0010] 5C 00 4D 00 69 00 63 00   72 00 6F 00 73 00 6F 00   \.M.i.c. r.o.s.o.
>  [0020] 66 00 74 00 5C 00 57 00   69 00 6E 00 64 00 6F 00   f.t.\.W. i.n.d.o.
>  [0030] 77 00 73 00 20 00 4E 00   54 00 5C 00 43 00 75 00   w.s. .N. T.\.C.u.
>  [0040] 72 00 72 00 65 00 6E 00   74 00 56 00 65 00 72 00   r.r.e.n. t.V.e.r.
>  [0050] 73 00 69 00 6F 00 6E 00   5C 00 50 00 72 00 69 00   s.i.o.n. \.P.r.i.
>  [0060] 6E 00 74 00 5C 00 50 00   72 00 6F 00 76 00 69 00   n.t.\.P. r.o.v.i.
>  [0070] 64 00 65 00 72 00 73 00   5C 00 43 00 6C 00 69 00   d.e.r.s. \.C.l.i.
>  [0080] 65 00 6E 00 74 00 20 00   53 00 69 00 64 00 65 00   e.n.t. . S.i.d.e.
>  [0090] 20 00 52 00 65 00 6E 00   64 00 65 00 72 00 69 00    .R.e.n. d.e.r.i.
>  [00A0] 6E 00 67 00 20 00 50 00   72 00 69 00 6E 00 74 00   n.g. .P. r.i.n.t.
>  [00B0] 20 00 50 00 72 00 6F 00   76 00 69 00 64 00 65 00    .P.r.o. v.i.d.e.
>  [00C0] 72 00 5C 00 53 00 65 00   72 00 76 00 65 00 72 00   r.\.S.e. r.v.e.r.
>  [00D0] 73 00 5C 00 64 00 61 00   73 00 74 00 61 00 72 00   s.\.d.a. s.t.a.r.
>  [00E0] 64 00 6C 00 79 00 2E 00   70 00 61 00 6E 00 69 00   d.l.y... p.a.n.i.
>  [00F0] 63 00 2E 00 75 00 6E 00   63 00 2E 00 65 00 64 00   c...u.n. c...e.d.
>              offered                  : 0x00000100 (256)
>[2009/11/10 09:57:05,  5] rpc_server/srv_spoolss_nt.c:7905(_spoolss_GetPrinterDriverDirectory)
>  _spoolss_GetPrinterDriverDirectory: level 1
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:7882(getprinterdriverdir_level_1)
>  printer driver directory: [\\dastardly.panic.unc.edu\print$\W32X86]
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_GetPrinterDriverDirectory: struct spoolss_GetPrinterDriverDirectory
>          out: struct spoolss_GetPrinterDriverDirectory
>              info                     : *
>                  info                     : union spoolss_DriverDirectoryInfo(case 1)
>                  info1: struct spoolss_DriverDirectoryInfo1
>                      directory_name           : '\\dastardly.panic.unc.edu\print$\W32X86'
>              needed                   : *
>                  needed                   : 0x00000050 (80)
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 40
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 396
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa6738c0
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa6738c0
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 1024
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 272.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0128
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000110
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f7410
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f7410
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..296] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=352
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45508
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  296 (0x128)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  296 (0x128)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=297
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 28 01 00 00 02 00 00   ........ .(......
>  [0010] 00 10 01 00 00 00 00 00   00 00 00 02 00 00 01 00   ........ ........
>  [0020] 00 5C 00 5C 00 64 00 61   00 73 00 74 00 61 00 72   .\.\.d.a .s.t.a.r
>  [0030] 00 64 00 6C 00 79 00 2E   00 70 00 61 00 6E 00 69   .d.l.y.. .p.a.n.i
>  [0040] 00 63 00 2E 00 75 00 6E   00 63 00 2E 00 65 00 64   .c...u.n .c...e.d
>  [0050] 00 75 00 5C 00 70 00 72   00 69 00 6E 00 74 00 24   .u.\.p.r .i.n.t.$
>  [0060] 00 5C 00 57 00 33 00 32   00 58 00 38 00 36 00 00   .\.W.3.2 .X.8.6..
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0090] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00A0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00D0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00E0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00F0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0100] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 50 00 00 00 00 00 00   00                       .P...... .
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2301 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45572
>  smt_wct=3
>  smb_vwv[ 0]= 4983 (0x1377)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=4983 (numopen=6)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 4983 (22 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45572
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 148
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x94
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2302 of length 152 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=148
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45636
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=81
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 40 00 00 00 0E 00 00   ........ .@......
>  [0020] 00 28 00 00 00 00 00 50   00 00 00 00 00 0C 00 00   .(.....P ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00 01 00 00   .....ùJ? ..0.....
>  [0040] 00 00 00 00 00 01 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0050] 00                                                . 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 64
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 64
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 64
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 64, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 48
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0040
>      000a auth_len  : 0000
>      000c call_id   : 0000000e
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 48, incoming data = 48
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000028
>      0004 context_id: 0000
>      0006 opnum     : 0050
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x50 - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERKEY
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[80].fn == 0x82a1610
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrinterKey: struct spoolss_EnumPrinterKey
>          in: struct spoolss_EnumPrinterKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>              key_name                 : ''
>              offered                  : 0x00000000 (0)
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:9264(_spoolss_EnumPrinterKey)
>  _spoolss_EnumPrinterKey
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:377(get_printer_snum)
>  short name:libra
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:05,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:05,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrinterKey: struct spoolss_EnumPrinterKey
>          out: struct spoolss_EnumPrinterKey
>              key_buffer               : *
>                  key_buffer               : NULL
>              needed                   : *
>                  needed                   : 0x00000028 (40)
>              result                   : WERR_MORE_DATA
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 48
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa673590
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa673590
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 12.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0024
>      000a auth_len  : 0000
>      000c call_id   : 0000000e
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 0000000c
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa57e910
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..36] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=92
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45636
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   36 (0x24)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   36 (0x24)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=37
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 24 00 00 00 0E 00 00   ........ .$......
>  [0010] 00 0C 00 00 00 00 00 00   00 00 00 00 00 28 00 00   ........ .....(..
>  [0020] 00 EA 00 00 00                                    .ê... 
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 148
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x94
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2303 of length 152 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=148
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45700
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=81
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 40 00 00 00 0F 00 00   ........ .@......
>  [0020] 00 28 00 00 00 00 00 50   00 00 00 00 00 0C 00 00   .(.....P ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00 01 00 00   .....ùJ? ..0.....
>  [0040] 00 00 00 00 00 01 00 00   00 00 00 00 00 28 00 00   ........ .....(..
>  [0050] 00                                                . 
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 64
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 64
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 64
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 64, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 48
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0040
>      000a auth_len  : 0000
>      000c call_id   : 0000000f
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 48, incoming data = 48
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000028
>      0004 context_id: 0000
>      0006 opnum     : 0050
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x50 - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERKEY
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[80].fn == 0x82a1610
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrinterKey: struct spoolss_EnumPrinterKey
>          in: struct spoolss_EnumPrinterKey
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>              key_name                 : ''
>              offered                  : 0x00000028 (40)
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:9264(_spoolss_EnumPrinterKey)
>  _spoolss_EnumPrinterKey
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_spoolss_nt.c:377(get_printer_snum)
>  short name:libra
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:4630(get_a_printer_internal)
>  get_a_printer: [libra] level 2
>[2009/11/10 09:57:05,  8] printing/nt_printing.c:4059(get_a_printer_2)
>  get_a_printer_2: Constructing a default device mode for [\\dastardly.panic.unc.edu\libra]
>[2009/11/10 09:57:05, 10] printing/nt_printing.c:2822(add_new_printer_key)
>  add_new_printer_key: Inserted new data key [PrinterDriverData]
>[2009/11/10 09:57:05,  9] printing/nt_printing.c:4092(get_a_printer_2)
>  Unpacked printer [libra] name [\\dastardly.panic.unc.edu\libra] running driver [HP LaserJet 4250 PCL6]
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_EnumPrinterKey: struct spoolss_EnumPrinterKey
>          out: struct spoolss_EnumPrinterKey
>              key_buffer               : *
>                  key_buffer               : *
>                      key_buffer: ARRAY(1)
>                          [0]                      : 'PrinterDriverData'
>              needed                   : *
>                  needed                   : 0x00000028 (40)
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 48
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa673590
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa673590
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 52.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 004c
>      000a auth_len  : 0000
>      000c call_id   : 0000000f
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000034
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..76] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=132
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45700
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   76 (0x4C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   76 (0x4C)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=77
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 4C 00 00 00 0F 00 00   ........ .L......
>  [0010] 00 34 00 00 00 00 00 00   00 00 00 02 00 50 00 72   .4...... .....P.r
>  [0020] 00 69 00 6E 00 74 00 65   00 72 00 44 00 72 00 69   .i.n.t.e .r.D.r.i
>  [0030] 00 76 00 65 00 72 00 44   00 61 00 74 00 61 00 00   .v.e.r.D .a.t.a..
>  [0040] 00 00 00 00 00 28 00 00   00 00 00 00 00           .....(.. .....
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 128
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x80
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2304 of length 132 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=128
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45764
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   44 (0x2C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   44 (0x2C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5061 (0x13C5)
>  smb_bcc=61
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 2C 00 00 00 10 00 00   ........ .,......
>  [0020] 00 14 00 00 00 00 00 1D   00 00 00 00 00 0C 00 00   ........ ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00           .....ùJ? ..0..
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c5)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed760 max_trans_reply: 4280
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 002c
>      000a auth_len  : 0000
>      000c call_id   : 00000010
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000014
>      0004 context_id: 0000
>      0006 opnum     : 001d
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[29].fn == 0x82ab3d0
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          in: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000c-0000-0000-f94a-3f7f01300000
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
>  Closed policy
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          out: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 28
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0030
>      000a auth_len  : 0000
>      000c call_id   : 00000010
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000018
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45764
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 30 00 00 00 10 00 00   ........ .0......
>  [0010] 00 18 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00                                                . 
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 128
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x80
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2305 of length 132 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=128
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45824
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   44 (0x2C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4136 (0x1028)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   44 (0x2C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5060 (0x13C4)
>  smb_bcc=61
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 2C 00 00 00 04 00 00   ........ .,......
>  [0020] 00 14 00 00 00 00 00 1D   00 00 00 00 00 0B 00 00   ........ ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00           .....ùJ? ..0..
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c4)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5ed9e8 max_trans_reply: 4136
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 002c
>      000a auth_len  : 0000
>      000c call_id   : 00000004
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000014
>      0004 context_id: 0000
>      0006 opnum     : 001d
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[29].fn == 0x82ab3d0
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          in: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000b-0000-0000-f94a-3f7f01300000
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
>  Closed policy
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          out: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 28
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4136
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0030
>      000a auth_len  : 0000
>      000c call_id   : 00000004
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000018
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f5450
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45824
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 30 00 00 00 04 00 00   ........ .0......
>  [0010] 00 18 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00                                                . 
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 128
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x80
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2306 of length 132 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=128
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45890
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   44 (0x2C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   44 (0x2C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 5059 (0x13C3)
>  smb_bcc=61
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 2C 00 00 00 03 00 00   ........ .,......
>  [0020] 00 14 00 00 00 00 00 1D   00 00 00 00 00 0A 00 00   ........ ........
>  [0030] 00 00 00 00 00 F9 4A 3F   7F 01 30 00 00           .....ùJ? ..0..
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 13c3)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5cc418 max_trans_reply: 1024
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 002c
>      000a auth_len  : 0000
>      000c call_id   : 00000003
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000014
>      0004 context_id: 0000
>      0006 opnum     : 001d
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[29].fn == 0x82ab3d0
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          in: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 0000000a-0000-0000-f94a-3f7f01300000
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 F9 4A 3F 7F   ........ ....ùJ?.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
>  Closed policy
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          out: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 28
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 1024
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0030
>      000a auth_len  : 0000
>      000c call_id   : 00000003
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000018
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f0f18
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f0f18
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=45890
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 30 00 00 00 03 00 00   ........ .0......
>  [0010] 00 18 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00                                                . 
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2307 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45956
>  smt_wct=3
>  smb_vwv[ 0]= 5061 (0x13C5)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=5061 (numopen=5)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 5061 (21 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=45956
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2308 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46020
>  smt_wct=3
>  smb_vwv[ 0]= 5060 (0x13C4)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=5060 (numopen=4)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 5060 (20 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46020
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 128
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x80
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2309 of length 132 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=128
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=46082
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   44 (0x2C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   44 (0x2C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4951 (0x1357)
>  smb_bcc=61
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 2C 00 00 00 10 00 00   ........ .,......
>  [0020] 00 14 00 00 00 00 00 1D   00 00 00 00 00 09 00 00   ........ ........
>  [0030] 00 00 00 00 00 F9 4A 3C   7F 01 30 00 00           .....ùJ< ..0..
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 1357)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa5f4db0 max_trans_reply: 4280
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 002c
>      000a auth_len  : 0000
>      000c call_id   : 00000010
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000014
>      0004 context_id: 0000
>      0006 opnum     : 001d
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[29].fn == 0x82ab3d0
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          in: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000009-0000-0000-f94a-3c7f01300000
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 F9 4A 3C 7F   ........ ....ùJ<.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 F9 4A 3C 7F   ........ ....ùJ<.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 F9 4A 3C 7F   ........ ....ùJ<.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
>  Closed policy
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          out: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 28
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4280
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0030
>      000a auth_len  : 0000
>      000c call_id   : 00000010
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000018
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f0cc0
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f0cc0
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=46082
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 30 00 00 00 10 00 00   ........ .0......
>  [0010] 00 18 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00                                                . 
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2310 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46148
>  smt_wct=3
>  smb_vwv[ 0]= 5059 (0x13C3)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=5059 (numopen=3)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 5059 (19 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46148
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 128
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x80
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2311 of length 132 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=128
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=46208
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   44 (0x2C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4136 (0x1028)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   44 (0x2C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4950 (0x1356)
>  smb_bcc=61
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 2C 00 00 00 05 00 00   ........ .,......
>  [0020] 00 14 00 00 00 00 00 1D   00 00 00 00 00 08 00 00   ........ ........
>  [0030] 00 00 00 00 00 F9 4A 3C   7F 01 30 00 00           .....ùJ< ..0..
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtrans (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2009/11/10 09:57:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/11/10 09:57:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/11/10 09:57:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/11/10 09:57:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "spoolss" (pnum 1356)
>[2009/11/10 09:57:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0xa578fe0 max_trans_reply: 4136
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 002c
>      000a auth_len  : 0000
>      000c call_id   : 00000005
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000014
>      0004 context_id: 0000
>      0006 opnum     : 001d
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\spoolss
>[2009/11/10 09:57:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[29].fn == 0x82ab3d0
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          in: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000008-0000-0000-f94a-3c7f01300000
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 F9 4A 3C 7F   ........ ....ùJ<.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 F9 4A 3C 7F   ........ ....ùJ<.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 F9 4A 3C 7F   ........ ....ùJ<.
>  [0010] 01 30 00 00                                       .0.. 
>[2009/11/10 09:57:05,  3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
>  Closed policy
>[2009/11/10 09:57:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       spoolss_ClosePrinter: struct spoolss_ClosePrinter
>          out: struct spoolss_ClosePrinter
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : WERR_OK
>[2009/11/10 09:57:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \spoolss successfully
>[2009/11/10 09:57:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 28
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa673570
>[2009/11/10 09:57:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \spoolss len: 4136
>[2009/11/10 09:57:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0030
>      000a auth_len  : 0000
>      000c call_id   : 00000005
>[2009/11/10 09:57:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000018
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0xa5f5260
>[2009/11/10 09:57:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0xa5f5260
>[2009/11/10 09:57:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1208
>  smb_uid=101
>  smb_mid=46208
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/11/10 09:57:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 30 00 00 00 05 00 00   ........ .0......
>  [0010] 00 18 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00                                                . 
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2312 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46276
>  smt_wct=3
>  smb_vwv[ 0]= 4951 (0x1357)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=4951 (numopen=2)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 4951 (18 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46276
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2313 of length 45 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46336
>  smt_wct=3
>  smb_vwv[ 0]= 4950 (0x1356)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa57f080
>[2009/11/10 09:57:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:05,  3] smbd/reply.c:4483(reply_close)
>  close fd=-1 fnum=4950 (numopen=1)
>[2009/11/10 09:57:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:05, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \spoolss
>[2009/11/10 09:57:05,  5] smbd/files.c:476(file_free)
>  freed files structure 4950 (17 used)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46336
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2314 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=18
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46400
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5b4b50
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service taurus
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to taurus
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1200
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa58a6a8
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1200
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=18
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46400
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2315 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=19
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46464
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5b61f8
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service stockroomcopier
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to stockroomcopier
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1300
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa58a6a8
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1300
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=19
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46464
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2316 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=20
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46528
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5b7b58
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service serpens
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to serpens
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1400
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1400
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=20
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46528
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2317 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=21
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46592
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5b9510
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service scorpius
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to scorpius
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1500
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1500
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=21
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46592
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2318 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=22
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46656
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5baea8
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service sagittarius
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to sagittarius
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1600
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1600
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=22
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46656
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2319 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=23
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46720
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5bc838
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service pyxis
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to pyxis
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1700
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1700
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=23
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46720
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2320 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=24
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46784
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5be170
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service pisces
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to pisces
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1800
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1800
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=24
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46784
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2321 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=25
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46848
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5c0b00
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service pictor
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to pictor
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1900
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1900
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=25
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46848
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2322 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=26
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46912
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5c2928
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service pegasus
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to pegasus
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1A00
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1A00
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=26
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46912
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2323 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=27
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46976
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5c43a8
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service orion
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to orion
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1B00
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1B00
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=27
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=46976
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2324 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=28
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47040
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5c5e70
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service microscopium
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to microscopium
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1C00
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5bf068
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1C00
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=28
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47040
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2325 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=29
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47104
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5c7798
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service lynx
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to lynx
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1D00
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1D00
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=29
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47104
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2326 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=30
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47168
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5c9550
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service lupus
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to lupus
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1E00
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5c58b8
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1E00
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=30
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47168
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2327 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=31
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47232
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5cae78
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service libra
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to libra
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF1F00
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5c4ec0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF1F00
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=31
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47232
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2328 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=32
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47296
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5cca30
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service leo
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to leo
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF2000
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5c4ec0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF2000
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=32
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47296
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/11/10 09:57:05,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x23
>[2009/11/10 09:57:05,  3] smbd/process.c:1459(process_smb)
>  Transaction 2329 of length 39 (0 toread)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=33
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47360
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:05,  3] smbd/process.c:1273(switch_message)
>  switch message SMBtdis (pid 12289) conn 0xa5ce3e0
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /var/spool/samba
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  1] smbd/service.c:1226(close_cnum)
>  __ffff_152.2.4.192 (::ffff:152.2.4.192) closed connection to service indus
>[2009/11/10 09:57:05,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to indus
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 01300000FFFFFFFF2100
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa614dd0
>[2009/11/10 09:57:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 01300000FFFFFFFF2100
>[2009/11/10 09:57:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/11/10 09:57:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/11/10 09:57:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/11/10 09:57:05,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/11/10 09:57:05,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=33
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47360
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2330 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47424
>  smt_wct=3
>  smb_vwv[ 0]= 4923 (0x133B)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (139759, 1001) - sec_ctx_stack_ndx = 0
>[2009/11/10 09:57:15,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-114069156-2663528578-1345302127-280518
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-114069156-2663528578-1345302127-280518
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-2-123
>  SID[  6]: S-1-22-1-139759
>  SE_PRIV  0x20 0x0 0x0 0x0
>[2009/11/10 09:57:15,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 139759
>  Primary group is 1001 and contains 2 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 123
>[2009/11/10 09:57:15,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,139759) gid=(0,1001)
>[2009/11/10 09:57:15,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /spare/samba/shares/print_
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=33 fnum=4923 (numopen=17)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/hpmcpap6.gpd, file_id = 303:7f51:0 gen_id = 12 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000517F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad910
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 12, uid = 139759, flags = 0, file_id 303:7f51:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000517F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/hpmcpap6.gpd = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/hpmcpap6.gpd
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/hpmcpap6.gpd (numopen=16) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4923 (16 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47424
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2331 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47488
>  smt_wct=3
>  smb_vwv[ 0]= 4924 (0x133C)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=34 fnum=4924 (numopen=16)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/UNIDRV.HLP, file_id = 303:7f2b:0 gen_id = 13 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000002B7F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:23:14 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 13, uid = 139759, flags = 0, file_id 303:7f2b:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000002B7F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/UNIDRV.HLP = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/UNIDRV.HLP
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/UNIDRV.HLP (numopen=15) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4924 (15 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47488
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2332 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47552
>  smt_wct=3
>  smb_vwv[ 0]= 4929 (0x1341)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=39 fnum=4929 (numopen=15)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/HPZ6CWN7.INI, file_id = 303:7f56:0 gen_id = 18 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000567F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 18, uid = 139759, flags = 0, file_id 303:7f56:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000567F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZ6CWN7.INI = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZ6CWN7.INI
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZ6CWN7.INI (numopen=14) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4929 (14 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47552
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2333 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47616
>  smt_wct=3
>  smb_vwv[ 0]= 4930 (0x1342)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=40 fnum=4930 (numopen=14)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/HPZSMWN7.GPD, file_id = 303:7f57:0 gen_id = 19 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000577F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 19, uid = 139759, flags = 0, file_id 303:7f57:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000577F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZSMWN7.GPD = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZSMWN7.GPD
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZSMWN7.GPD (numopen=13) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4930 (13 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47616
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2334 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47680
>  smt_wct=3
>  smb_vwv[ 0]= 4931 (0x1343)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=41 fnum=4931 (numopen=13)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/HPZ6MWN7.GPD, file_id = 303:7f58:0 gen_id = 20 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000587F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 20, uid = 139759, flags = 0, file_id 303:7f58:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000587F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZ6MWN7.GPD = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZ6MWN7.GPD
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZ6MWN7.GPD (numopen=12) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4931 (12 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47680
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2335 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47744
>  smt_wct=3
>  smb_vwv[ 0]= 4932 (0x1344)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=42 fnum=4932 (numopen=12)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/hpmcpap6.xml, file_id = 303:7f59:0 gen_id = 21 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000597F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 21, uid = 139759, flags = 0, file_id 303:7f59:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000597F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/hpmcpap6.xml = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/hpmcpap6.xml
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/hpmcpap6.xml (numopen=11) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4932 (11 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47744
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2336 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47808
>  smt_wct=3
>  smb_vwv[ 0]= 4933 (0x1345)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=43 fnum=4933 (numopen=11)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/HPZSCWN7.DTD, file_id = 303:7f5a:0 gen_id = 22 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005A7F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:11 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 22, uid = 139759, flags = 0, file_id 303:7f5a:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005A7F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPZSCWN7.DTD = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPZSCWN7.DTD
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPZSCWN7.DTD (numopen=10) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4933 (10 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47808
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2337 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47872
>  smt_wct=3
>  smb_vwv[ 0]= 4935 (0x1347)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=45 fnum=4935 (numopen=10)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/HPMCPAP6.CFG, file_id = 303:7f5b:0 gen_id = 24 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 03030000000000005B7F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:32:00 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 24, uid = 139759, flags = 0, file_id 303:7f5b:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 03030000000000005B7F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPMCPAP6.CFG = 0
>[2009/11/10 09:57:15, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file W32X86/3/HPMCPAP6.CFG
>[2009/11/10 09:57:15,  2] smbd/close.c:612(close_normal_file)
>  brinegar closed file W32X86/3/HPMCPAP6.CFG (numopen=9) NT_STATUS_OK
>[2009/11/10 09:57:15,  5] smbd/files.c:476(file_free)
>  freed files structure 4935 (9 used)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47872
>  smt_wct=0
>  smb_bcc=0
>[2009/11/10 09:57:15, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/11/10 09:57:15,  6] smbd/process.c:1456(process_smb)
>  got message type 0x0 of len 0x29
>[2009/11/10 09:57:15,  3] smbd/process.c:1459(process_smb)
>  Transaction 2338 of length 45 (0 toread)
>[2009/11/10 09:57:15,  5] lib/util.c:632(show_msg)
>[2009/11/10 09:57:15,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=34
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=47936
>  smt_wct=3
>  smb_vwv[ 0]= 4944 (0x1350)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/11/10 09:57:15,  3] smbd/process.c:1273(switch_message)
>  switch message SMBclose (pid 12289) conn 0xa5e9578
>[2009/11/10 09:57:15,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/11/10 09:57:15,  3] smbd/reply.c:4483(reply_close)
>  close fd=54 fnum=4944 (numopen=9)
>[2009/11/10 09:57:15,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Wed Dec 31 18:59:59 1969
>[2009/11/10 09:57:15, 10] smbd/oplock_linux.c:139(linux_release_kernel_oplock)
>  linux_release_kernel_oplock: file W32X86/3/HPEACLHN.HPI, file_id = 303:7f44:0 gen_id = 33 has kernel oplock state of 1.
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0303000000000000447F
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0xa5ad8a0
>[2009/11/10 09:57:15, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed 10 Jun 2009 05:31:56 PM EDT EDT, cwrt: Wed 31 Dec 1969 07:00:00 PM EST EST, tok: 0, num_share_modes: 1
>[2009/11/10 09:57:15, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12289, share_access = 0x1, private_options = 0x44, access_mask = 0x20089, mid = 0x0, type= 0x3, gen_id = 33, uid = 139759, flags = 0, file_id 303:7f44:0
>[2009/11/10 09:57:15, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0303000000000000447F
>[2009/11/10 09:57:15, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file W32X86/3/HPEACLHN.HPI = 0
>[2009/11/10